EIP-2026-113805

This exploit demonstrates an arbitrary file download vulnerability in the WordPress plugin HB Audio Gallery Lite. The vulnerability arises from insufficient input validation in the 'audio-download.php' file, allowing attackers to download sensitive files like 'wp-config.php' via directory traversal.