EIP-2026-114191

This exploit demonstrates an arbitrary file deletion vulnerability in the Woo Import Export Lite WordPress plugin (version 1.0). The vulnerability arises from unsanitized user input in the 'file_name' parameter, allowing an authenticated attacker to delete critical files like 'wp-config.php' via a directory traversal attack.