EIP-2026-113749

This exploit demonstrates an information disclosure vulnerability in WordPress firestats plugin version 1.6.5. It allows unauthenticated attackers to download the configuration file containing database credentials via a direct GET request to a specific PHP file.