EIP-2026-113828

This exploit demonstrates a file upload vulnerability in the WordPress plugin InBoundio Marketing v1.0, allowing remote attackers to upload a malicious PHP shell and execute arbitrary commands. The PoC uses cURL to send a POST request with a shell file to the vulnerable endpoint.