EIP-2026-114001
PRE-CVEWordPress Plugin Recent Backups 0.7 - Arbitrary File Download
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114001. PoCs published by Larry W. Cashdollar.
AI-analyzed exploit summary The exploit demonstrates an arbitrary file download vulnerability in the recent-backups WordPress plugin due to lack of authentication and input sanitization in download-file.php. It allows unauthenticated attackers to download sensitive system files via a crafted GET request.
Description
WordPress Plugin Recent Backups 0.7 - Arbitrary File Download
Exploits (1)
The exploit demonstrates an arbitrary file download vulnerability in the recent-backups WordPress plugin due to lack of authentication and input sanitization in download-file.php. It allows unauthenticated attackers to download sensitive system files via a crafted GET request.