Avada Builder Vulnerabilities Expose One Million WordPress Sites to File Read and SQL Injection (infosecurity-magazine.com)
0xBASE INTEL BRIEF
- Avada Builder flaws: file read (CVE pending) and SQL injection (CVE pending).
- Over 1 million WordPress sites at risk.
- Patched in version 3.9.1; update recommended.
"Two critical flaws in the Avada Builder plugin allow file reading and SQL injection on over one million WordPress sites. Attackers can access sensitive data or compromise databases. Patches are available."
no comments yet.