EIP-2026-114359

This exploit demonstrates an arbitrary file download vulnerability in the Urban City WordPress theme. By manipulating the 'file' parameter in the download.php script, an attacker can retrieve sensitive files from the server.