A high-severity vulnerability has been discovered in the Page Builder by SiteOrigin WordPress plugin, which is installed on over 500,000 websites. The vulnerability is rated 8.8 on the CVSS severity scale. The plugin is vulnerable to Local File Inclusion, which means it can be forced to load files from the server without properly restricting which files are allowed. An attacker must have Contributor-level access or higher to include and execute arbitrary files on the server, allowing for the execution of any PHP code in these files. The issue has been fixed in version 2.34.0.