A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to ...
Two unpatched Kaltura mwEmbed flaws allow unauthenticated file read and could enable RCE through unsafe deserialization.