EIP-2026-113879

This exploit demonstrates an arbitrary file download vulnerability in the Mailing List plugin for WordPress (versions < 1.4.2). The vulnerability arises from improper handling of file paths in the `dl.php` script, allowing attackers to download arbitrary files by manipulating database entries and passing crafted requests.