EIP-2026-113481

This exploit demonstrates an HTTP response splitting vulnerability in WordPress by injecting malicious headers and content into a POST request to wp-login.php. The attack manipulates the server's response to include arbitrary content, potentially leading to cache poisoning or phishing attacks.