EIP-2026-113580

This exploit targets a file upload vulnerability in the WordPress Background Image Cropper plugin v1.2, allowing unauthenticated remote code execution via a malicious PHP shell upload. The script automates the process by checking for vulnerable endpoints and uploading a shell.