EIP-2026-114197

The provided text describes multiple HTML injection and security bypass vulnerabilities in the Wordfence Security Plugin for WordPress. It includes a path traversal example to access sensitive files like wp-config.php via an admin-ajax.php endpoint.