EIP-2026-113652

This exploit targets a WordPress plugin (content-flow3d) to achieve arbitrary file upload via a vulnerable upload.php endpoint. It uses cURL to send a POST request with a malicious file (bazinga.php.jpg) to bypass restrictions.