EIP-2026-113684

This exploit demonstrates a remote file disclosure vulnerability in WordPress Plugin DM Albums 1.9.2. It allows an attacker to read arbitrary files by manipulating the 'file' and 'currdir' parameters in the URL.