EIP-2026-113897

The exploit demonstrates an arbitrary file download vulnerability in WordPress MiwoFTP Plugin 1.0.5 by crafting a malicious URL to download sensitive files like wp-config.php. The attack leverages improper input validation in the plugin's file download functionality.