EIP-2026-114252

This exploit demonstrates an arbitrary file download vulnerability in the wp-FileManager WordPress plugin due to insufficient input sanitization. Attackers can traverse directories and download sensitive files like wp-config.php.