EIP-2026-113804

This PHP script exploits an arbitrary file upload vulnerability in Gravity Forms for WordPress (versions 1.8.19 and below) by uploading a malicious PHP file via a crafted POST request. It then spawns a pseudo-shell for remote command execution.