An urgent update has been released for the Elementor plugin on the WordPress platform. Corrects a tracked critical security vulnerability, titled CVE-2023-32243, that put more than one million of websites using it at risk.

The vulnerability allows The hackers to reset users’ passwords using only the usernames (account name). So website admins are advised to update the plugin to version 5.7.2, to avoid damage.