Critical Avada WordPress theme flaw enables zero-click RCE

Read post on bleepingcomputer.com

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. [...]