EIP-2026-113673

This is a CSRF exploit for WordPress Plugin Curtain 1.0.2, allowing an attacker to activate or deactivate maintenance mode via a crafted HTML form. The PoC demonstrates the vulnerability by submitting a form with hidden inputs to the vulnerable endpoint.