EIP-2026-113884

The exploit describes a Local File Inclusion (LFI) vulnerability in WordPress Plugin Media Library Assistant 2.81, allowing unauthenticated file disclosure via a crafted URL. It also mentions multiple XSS vulnerabilities requiring authentication.