Convert Plus ver. 3.4.2 Security flaw

We recently cleaned several sites affected by the recent convertplug plugin vulnerability. In most cases plugin is bundled with Avada theme. All Convert Plus versions up to 3.4.2 are vulnerable to attacks.
Users should update to version 3.4.3 ASAP, as this is a critical security issue.