EIP-2026-113542

This exploit demonstrates two vulnerabilities in WordPress Plugin Advanced uploader v2.10: arbitrary file upload leading to remote code execution (RCE) and local file disclosure via path traversal. The PoC uses cURL to upload a malicious PHP file and to read sensitive files like wp-config.php.