EIP-2026-113803

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress grapefile plugin <= 1.1. The vulnerable code in grapeupload.php allows unauthenticated users to upload files to a predictable directory without proper validation.