EIP-2026-113668

This exploit demonstrates a CSRF vulnerability in WordPress CP Polls 1.0.8, allowing an attacker to update poll settings and inject persistent XSS payloads. It also includes a reflected file download vulnerability that can trick administrators into executing malicious .bat files.