EIP-2026-113779

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress Gallery Plugin (v3.06). It uses cURL to upload a malicious PHP file disguised as an image (lo.php.gif) to the vulnerable endpoint, achieving remote code execution (RCE).