EIP-2026-114171

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the WordPress plugin video-synchro-pdf version 1.7.4. The vulnerable code in 'tout.php' allows an attacker to include arbitrary files via the 'p' parameter due to insufficient input validation.