EIP-2026-113666

This exploit demonstrates an arbitrary file download vulnerability in WordPress CP Image Store with Slideshow 1.0.5. The vulnerability allows remote attackers to download arbitrary files from the server by manipulating the 'f' parameter in a crafted HTTP request.