This top WordPress plugin had a security flaw that could let hackers hijack your site

One of the most popular website builder plugins for WordPress carries a high-severity vulnerability that threat actors can use to take over the vulnerable website completely, researchers have warned.

Cybersecurity researcher Jerome Bruandet from NinTechNet said he discovered a flaw in Elementor Pro that allows an authenticated attacker to create an administrator account. That gives the attackers a range of possibilities, including one that’s being actively used – to redirect all traffic to an external malicious website.