Page Builder by SiteOrigin WordPress plugin vulnerability enables attackers to execute arbitrary server files.
It might come as a shock to some that many open source projects have a "benevolent dictator for life" governance model.