EIP-2026-113516

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress plugin 3DPrint Lite (versions <= 1.9.1.4). It uploads a PHP file via an unauthenticated AJAX endpoint, allowing remote code execution.