EIP-2026-114337

The exploit demonstrates a Local File Inclusion (LFI) vulnerability in the WordPress Theme LineNity via the 'download.php' file. By manipulating the 'imgurl' parameter, an attacker can read arbitrary files on the server, as shown in the provided PoC URLs.