Vendor
An unauthenticated arbitrary file write vulnerability in the Avada WordPress theme and Fusion Builder plugin allows remote attackers to execute arbitrary PHP code and compromise the host.