EIP-2026-113999

The exploit demonstrates a file inclusion vulnerability in WordPress Really Simple Guest Post plugin (v<=1.0.6) via the 'rootpath' POST parameter, allowing arbitrary file reads (e.g., /etc/passwd). The PoC uses curl to send a crafted POST request to the vulnerable endpoint.