EIP-2026-113582

This exploit demonstrates an arbitrary file deletion vulnerability in the WordPress Plugin Backup and Restore 1.0.3. It sends a crafted POST request to delete sensitive files like wp-config.php by manipulating the file_name and folder_name parameters.