Avada WordPress Theme Arbitrary File Write

The Avada theme for WordPress is vulnerable to Arbitrary File Write when used with the Fusion Builder plugin.

Attackers can exploit this vulnerability to write and execute arbitrary PHP files, leading to remote code execution and complete site compromise.

This issue affects Avada versions up to 7.16 and Fusion Builder versions up to 3.16. Successful exploitation requires both plugins to be installed and active, as well as specific administrator-authored content.