EIP-2026-109642

This exploit leverages an arbitrary file upload vulnerability in multiple WPScientist WordPress themes, allowing an attacker to upload a malicious PHP file and achieve remote code execution. The PoC uses cURL to send a POST request with the file payload.