EIP-2026-113616

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the WordPress plugin 'cab-fare-calculator' version 1.0.3. The vulnerability arises from unsanitized user input in the 'controller' parameter, allowing arbitrary file inclusion and potential code execution.