EIP-2026-114308

The exploit demonstrates an arbitrary file download vulnerability in the Authentic theme for WordPress. By manipulating the 'file' parameter in the download.php script, an attacker can traverse directories and download sensitive files like wp-config.php.