Critical Avada WordPress theme flaw enables zero-click RCE

Summary

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. [...]