CVE-2019-25217

The SiteGround Optimizer plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 5.0.12 . The root cause is the incorrect use of an access control attribute on the switch_php function, which is accessed via the /switch-php REST API route . Exploitation can le...