EIP-2026-113771

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress front-end-upload plugin (version 0.5.3). It uses cURL to upload a malicious PHP file ('shell.php') to the server, bypassing restrictions due to improper file validation.