Elementor patches critical CSRF flaw enabling privilege escalation in versions 4.3.0–4.3.1.