Zero-click RCE in Avada leaves million sites exposed
A 9.8-rated flaw chain in the Avada WordPress theme lets unauthenticated attackers run PHP code.
2 results for “wordfence”
A 9.8-rated flaw chain in the Avada WordPress theme lets unauthenticated attackers run PHP code.
Attackers planted rogue admins and webshells on WordPress sites via a poisoned data feed, not file changes.