WordPress publishers using the Metform Elementor Contact Form Builder should consider updating their plugin to version 3.2.3, the version that is fully patched.

Elementor WordPress plugin vulnerability rated at 8.8/10 allows an attacker to upload malicious files and stage a remote code execution attack ...

Hackers exploit WordPress plugin flaw that gives full control of millions of sites Elementor Pro fixed the vulnerability, but not everyone has installed the patch.