EIP-2026-113785

This exploit demonstrates an authentication bypass vulnerability in the WordPress Export to Ghost plugin, allowing unauthenticated users to download the Ghost export file via a direct URL request. The issue is due to missing admin authentication checks in versions prior to 0.5.6.