EIP-2026-114279

The exploit demonstrates an unauthenticated file download vulnerability in wptf-image-gallery v1.03 due to unsanitized user input in ajax_load.php. The PoC uses a simple curl command to retrieve sensitive system files like /etc/passwd.