EIP-2026-113683
PRE-CVEWordPress Plugin Disclosure Policy 1.0 - Remote File Inclusion
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113683. PoCs published by Ben Schmidt.
AI-analyzed exploit summary This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in the Disclosure Policy Plugin for WordPress. The vulnerability arises from unsanitized user input in the 'abspath' parameter, allowing an attacker to include arbitrary remote files. The PoC provides a URL structure to trigger the vulnerability.
Description
WordPress Plugin Disclosure Policy 1.0 - Remote File Inclusion
Exploits (1)
This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in the Disclosure Policy Plugin for WordPress. The vulnerability arises from unsanitized user input in the 'abspath' parameter, allowing an attacker to include arbitrary remote files. The PoC provides a URL structure to trigger the vulnerability.