EIP-2026-113880

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in the Mailing List WordPress plugin (version 1.3.2). The vulnerable code in 'config.php' allows an attacker to include arbitrary remote files via the 'wpabspath' parameter, leading to potential remote code execution.