EIP-2026-104498

This writeup describes an information disclosure vulnerability in WordPress Plugin Total Upkeep 1.14.9, where unauthenticated access to sensitive files reveals system details, backup paths, and plugin version.