EIP-2026-113824

This exploit leverages a shell upload vulnerability in the WordPress Image Manager plugin by disguising a PHP shell as a GIF file. The attacker uploads the malicious file via the plugin's manager.php, resulting in remote code execution (RCE) with the shell accessible in the /demo_images/ directory.