EIP-2026-113715

This exploit demonstrates a remote file upload vulnerability in WordPress EditorMonkey (FCKeditor) plugin version 2.5 or lower. The vulnerable endpoint allows unauthenticated file uploads, enabling an attacker to upload arbitrary files to the server.