EIP-2026-113575

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress Audio Record plugin 1.0. The vulnerability arises due to unrestricted file upload in the recorder.php file, allowing attackers to upload malicious PHP files by manipulating the Content-Type and filename parameters.