Cpe:2.3:a:siteorigin:widgets_bundle:*:*:*:*:*:wordpress:*:*

Authenticated attackers with contributor-level access can exploit a Local File Inclusion vulnerability in the SiteOrigin Widgets Bundle WordPress plugin to execute arbitrary PHP code via the REST API.