EIP-2026-113827

This exploit demonstrates a directory traversal vulnerability in the WordPress plugin 'XML and CSV Import in Article Content' (version 1.1). By manipulating the URL field in the upload-process.php form, an attacker can traverse directories and access sensitive files like wp-config.php.