Two vulnerabilities in the Avada Builder plugin for WordPress, with an estimated one million active installations, allow ...