EIP-2026-113718

The exploit demonstrates an information disclosure vulnerability in the Email Newsletter WordPress plugin by leveraging insufficient user input validation in the export.php script. Attackers can retrieve sensitive user data by manipulating the 'option' parameter in the URL.