EIP-2026-113774

This exploit demonstrates an arbitrary file upload vulnerability in the Frontend Upload WordPress plugin, allowing attackers to upload PHP files with malicious extensions (e.g., c99.php) to execute arbitrary code on the server.