EIP-2026-113539

This exploit targets a file upload vulnerability in the WordPress Adning Advertising plugin (versions < 1.5.6), allowing arbitrary file uploads by manipulating the upload directory path. It leverages the plugin's AJAX endpoint to bypass file type restrictions and upload a malicious PHP file.