EIP-2026-113689

This exploit targets a vulnerability in WordPress Download Manager versions 2.7.0-2.7.4, allowing unauthenticated remote command execution by leveraging the `wpdm_ajax_call_exec` function to call `wp_insert_user` and create an administrator account.