EIP-2026-114080

This PHP script exploits a file inclusion vulnerability in the WordPress Spicy Blogroll plugin by crafting a malicious request to include arbitrary files via the `var2` and `var4` parameters. The `scramble` function is used to obfuscate the payload, which is then sent to the vulnerable endpoint.