Critical Avada WordPress theme flaw enables zero-click RCE | CyberBlackmail