EIP-2026-112064

This exploit leverages a path traversal vulnerability in the Simple Backup Plugin for WordPress (versions < 2.7.10) to arbitrarily download files from the server. It constructs a malicious request to `/wp-admin/tools.php` with traversal sequences to access files outside the intended directory.