EIP-2026-113898

This exploit demonstrates an arbitrary file download vulnerability in the WordPress MiwoFTP Plugin 1.0.5. It allows unauthenticated attackers to download sensitive files like wp-config.php by manipulating the 'item' parameter in a crafted URL.