EIP-2026-104793

This Metasploit module exploits an arbitrary file upload vulnerability in the WordPress Work The Flow plugin (version 2.5.2), allowing remote code execution via a malicious PHP file upload. The exploit leverages a multipart form data POST request to bypass restrictions and deploy a payload.