EIP-2026-114198

This exploit demonstrates a local file disclosure vulnerability in WordPress Plugin Wordfence 7.4.5. The vulnerability arises from improper sanitization of the 'file' parameter, allowing an attacker to read arbitrary files on the server.