EIP-2026-113532

This exploit demonstrates a CSRF vulnerability in the WP Add Mime Types WordPress plugin (version <= 2.2.1). The PoC uses a malicious HTML form to automatically submit a POST request, allowing an attacker to add arbitrary MIME types (e.g., .exe) to the allowed upload list.