EIP-2026-113479

This exploit targets a file upload vulnerability in the WordPress Augmented-Reality plugin, allowing unauthenticated remote code execution by uploading a malicious PHP file via the elFinder connector. The script automates the process of creating a file, uploading malicious content, and verifying the shell's accessibility.