EIP-2026-114302

This exploit demonstrates an arbitrary file download vulnerability in the WordPress 'acento' theme. The vulnerability allows unauthenticated attackers to download sensitive files (e.g., wp-config.php, /etc/passwd) by manipulating the 'file' parameter in the view-pdf.php script.