EIP-2026-113823

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress image-gallery-with-slideshow plugin <= 1.5. It allows an attacker to upload a malicious PHP file via a cURL command, bypassing authentication and potentially leading to remote code execution.