EIP-2026-113875

This exploit demonstrates an arbitrary file download vulnerability in WordPress Plugin Mac Photo Gallery v3.0. The vulnerability allows unauthenticated attackers to download sensitive files by manipulating the 'albid' parameter in the 'macdownload.php' script.