File read

Arbitrary File Read & SQL Injection in Avada Builder

Avada (Fusion) Builder version 3.15.1 has two vulnerabilities: Arbitrary file read (e.g. leak wp-config.php) and unauthenticated SQL injection.

17 May 2026

Read more