EIP-2026-114248

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in the WordPress plugin WP with Spritz 1.0. The vulnerability arises from improper handling of user-supplied input in the 'url' parameter, allowing an attacker to include arbitrary local or remote files.