Critical Avada WordPress theme flaw enables zero-click RCE

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. [...]

To respect copyright, we link to the source rather than republishing the full text. Read the complete article on BleepingComputer.