Elementor WordPress flaw lets attackers create admin accounts

BleepingComputer security feed containing reports on actively exploited vulnerabilities, malware campaigns, cybercrime, and security-relevant technology developments. Key threats include a WordPress Elementor CSRF flaw enabling unauthenticated administrator account creation, exploitation of WSO2 authentication bypass CVE-2026-5430, active exploitation of a Roundcube code-injection vulnerability, Carbonato malware targeting exposed Docker daemons, MacSync malware using public iCloud calendars for payload delivery, and a major Bitget cryptocurrency theft attributed to suspected North Korean604?