1 Million WordPress Sites Affected by Avada Builder File Read and SQL Injection Flaws
Mon May 18 2026
Patch Management
Vulnerability
cybersecuritynews.com
A widely used WordPress plugin powering over one million websites has been hit by two serious vulnerabilities that could allow attackers to steal sensitive data and access server files. Security researchers warn that the flaws in the Avada Builder plugin could be actively exploited if sites remain unpatched. The issues, discovered by researcher Rafie Muhammad through […]
The post 1 Million WordPress Sites Affected by Avada Builder File Read and SQL Injection Flaws appeared first on Cyber Security News.