Two newly disclosed vulnerabilities in the Avada Builder WordPress plugin have placed around one million sites at risk of ...