From CSRF to RCE and WordPress-Site Takeover: CVE-2020-8417 | Hacker News Reader