#avada


Critical Avada WordPress theme flaw enables zero-click RCE

Aug 27, 2026 // 00:57

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the […]

Avada Builder WordPress plugin flaws allow site credential theft

May 15, 2026 // 19:16

Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow hackers to read arbitrary files and extract sensitive […]