A critical arbitrary file upload bug in Forminator Forms, running on more than 600,000 WordPress sites, lets unauthenticated attackers execute…
The Avada Builder plugin flaws allow low level users to read server files and unauthenticated attackers to steal database credentials.