EIP-2026-113565

This exploit demonstrates a local file inclusion vulnerability in the WordPress Anti-Malware Security and Bruteforce Firewall plugin (version 4.18.63). It allows authenticated users to read arbitrary files by manipulating the GOTMLS_scan parameter with a base64-encoded file path.