EIP-2026-113977

This exploit demonstrates a remote file inclusion vulnerability in the Post Recommendations WordPress plugin by leveraging insufficient input sanitization in the 'abspath' parameter. It uses cURL to send a malicious request to include a remote file ('lo.txt') containing PHP code, leading to arbitrary code execution.