Tag: avada
2 articles
WordPress Flaws Expose Sites to Takeover, Code Execution
Critical vulnerabilities in popular WordPress plugins and themes have been exposed, putting sites at risk of takeover, remote code execution, and full compromise. Five flaws with near-maximum severity ratings have been disclosed, affecting specific versions of WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP.
Avada WordPress Theme Flaw Enables Zero-Click Remote Code Execution
A critical vulnerability in the Avada WordPress theme, scored 9.8 out of 10, can be exploited through a zero-click remote code execution attack, allowing hackers to run malicious PHP code on affected sites without needing login credentials. This flaw enables attackers to take full control of a site, planting malware, stealing data, or creating rogue admin accounts.