EIP-2026-113697

This exploit targets an unauthenticated sensitive data exposure vulnerability in WordPress Plugin Duplicator < 1.5.7.1. It polls a temporary backup directory every 5 seconds, retrieves exposed files, and displays their contents, potentially leading to database exposure and system compromise.