In reply to sarah.

While it's already been made public, both by our vendor (Envato) by eBlasting out to every customer that bought Avada, since they are the only ones who have the emails, as well as our own knowledgebase post, there should really be no reason to make it even more. Every person that bought Avada knows.

Nevertheless, we promised a blog post was on it's way and here it is: https://theme-fusion.com/security-fixes-added-5-1-5/

Sarah, you said ... "Send me the link to your post and I will link to that instead. :)"

The link is above, we hope you replace the reporters post with ours as you said you would.