EIP-2026-113873

This is a technical writeup detailing a local file inclusion (LFI) vulnerability in the WordPress Loco Translate plugin (Version 2.2.1). The exploit abuses the template editing functionality to read arbitrary system files, such as /etc/passwd, via URL manipulation.