Avada Builder flaws expose around one million WordPress sites

Two vulnerabilities disclosed in the Avada Builder WordPress plugin put around one million sites at risk of arbitrary file read and SQL injection attacks.