EIP-2026-114147

This exploit demonstrates a local file disclosure vulnerability in the WordPress UnGallery plugin (version <= 1.5.8) due to improper path traversal handling in the 'source_vuln.php' file. The PoC sends a crafted HTTP request to read arbitrary files (e.g., /etc/passwd) by manipulating the 'pic' parameter.