EIP-2026-104787

This Metasploit module exploits an arbitrary file upload vulnerability in WordPress Ajax Load More plugin (version 2.8.1.1). It allows authenticated users to upload malicious PHP files and achieve remote code execution by leveraging a nonce-based authentication bypass.