EIP-2026-113701

This exploit demonstrates a remote file upload vulnerability in the WordPress dzs-videogallery plugin by leveraging a misconfigured upload.php endpoint. It uses cURL to send a POST request with a file upload, potentially allowing arbitrary file uploads leading to RCE.