EIP-2026-113732

This exploit demonstrates a privilege escalation vulnerability in the Extra User Details WordPress plugin (v0.4.2). It leverages improper capability checks in the `eud_update_ExtraFields` function to update user meta data, allowing an attacker to escalate their privileges to administrator by manipulating the `wp_capabilities` field.