EIP-2026-114255

The exploit demonstrates a directory traversal vulnerability in Wp-ImageZoom for WordPress, allowing an attacker to read arbitrary local files by manipulating the 'file' parameter in the download.php script. The provided URL example shows how to access the /etc/passwd file.