When is the best time to upgrade your WordPress installation, its plugins and themes? Pretty much as often as you can. And right now seems to be a particular good time again…
The combination of WordPress and the Elementor Pro website builder and WooCommerce e-commerce plugin is vulnerable to complete website take-over. The vulnerability lies with Elementor Pro, and a patched version is available.
Here is a nice write-up of the vulnerability and its exploit at arsTECHNICA:
Please update immediately, and foster a habit of doing so regularly.