Security News Critical Avada WordPress theme flaw enables zero-click RCE BleepingComputer Daniel Bender 26 Aug 2026 Share A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server.