EIP-2026-113799

This PoC exploits an unrestricted file upload vulnerability in GoURL Bitcoin WordPress Plugin by bypassing file extension checks via a long filename. It demonstrates how a malicious PHP file can be uploaded and executed on the target server.