EIP-2026-113794

This exploit demonstrates an unauthenticated remote code execution (RCE) vulnerability in the Plugin Google Drive for WordPress 2.2. The vulnerability arises from improper escaping of the `file_name` parameter in a POST request, allowing arbitrary file deletion via directory traversal.