EIP-2026-113505

This Perl script demonstrates a Cross Site Host Modification vulnerability in WordPress <= 5.2.3 by sending a crafted HTTP request with a modified 'Host' header to redirect responses to an attacker-controlled domain. It leverages the lack of proper validation in WordPress's handling of the Host header.