AVADA BUILDER PLUGIN FLAWS EXPOSE WORDPRESS CREDENTIALS

Two critical vulnerabilities in the Avada Builder WordPress plugin expose sensitive data and site credentials to attackers. The plugin, installed on approximately one million WordPress sites, allows hackers to read arbitrary files and extract information from databases.