Serious Avada Builder vulnerabilities have placed up to one million WordPress websites at risk of credential theft and database attacks. Security researchers recently disclosed two flaws affecting the widely used plugin, warning that attackers could exploit them to access sensitive server data and extract password information. The vulnerabilities affect Avada Builder installations running older versions…