EIP-2026-113570

The exploit demonstrates an arbitrary file download vulnerability in the WordPress aspose-doc-exporter plugin. The vulnerable PHP script does not sanitize user input, allowing directory traversal via the 'file' parameter to download sensitive files like wp-config.php.