EIP-2026-114295

This exploit demonstrates a Remote File Inclusion (RFI) vulnerability in the Zingiri Web Shop WordPress plugin. The vulnerable code unsafely includes a file path provided via the 'wpabspath' parameter without proper validation, allowing an attacker to include arbitrary remote files.