0x

guest@0xbase ~$ read-only mode. Posting requires EU location.

Avada Builder Vulnerabilities Expose One Million WordPress Sites to File Read and SQL Injection (infosecurity-magazine.com)

· 75d ago · Report · Spotlight this ·
0xBASE INTEL BRIEF
  • Avada Builder flaws: file read (CVE pending) and SQL injection (CVE pending).
  • Over 1 million WordPress sites at risk.
  • Patched in version 3.9.1; update recommended.

"Two critical flaws in the Avada Builder plugin allow file reading and SQL injection on over one million WordPress sites. Attackers can access sensitive data or compromise databases. Patches are available."

Discussion Matrix

0 segments

no comments yet.