WordPress publishers using the Metform Elementor Contact Form Builder should consider updating their plugin to version 3.2.3, the version that is fully patched.

The Metform Elementor Contact Form builder is a third party add-on to the popular Elementor page builder plugin with over over 200,000 installations.

Hackers exploit WordPress plugin flaw that gives full control of millions of sites Elementor Pro fixed the vulnerability, but not everyone has installed the patch.