EIP-2026-113683

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in the Disclosure Policy Plugin for WordPress. The vulnerability arises from unsanitized user input in the 'abspath' parameter, allowing an attacker to include arbitrary remote files. The PoC provides a URL structure to trigger the vulnerability.