Critical Avada WordPress theme flaw enables zero-click RCE

BleepingComputer security feed covering critical vulnerabilities, active exploitation, ransomware or cyberattack-related disruptions, data breaches, phishing operations, DDoS activity, espionage infrastructure disruption, and security product updates. Notable items include unauthenticated remote code execution in the Avada WordPress theme, active exploitation of Microsoft SharePoint and Gitea flaws, maximum-severity Ubiquiti vulnerabilities, GPU ECC bypass enabling root access, and attacks affecting healthcare and government organizations.