EIP-2026-109640

This exploit leverages an arbitrary file upload vulnerability in the WordPress SimpleCart Theme (v2.1.2) to upload and execute malicious files. The HTML form dynamically generates a request to the vulnerable upload endpoint with a crafted filename and path.