CVE-2019-25217

The CVE-2019-25217 entry describes an authorization bypass in the SiteGround Optimizer WordPress plugin (versions up to 5.0.12) that allows Remote Code Execution and Local File Inclusion via the /switch-php REST API route. The root cause is an incorrect use of an access control attribute on the s...