EIP-2026-113835

This exploit leverages the WordPress REST API vulnerability in versions 4.7.0/4.7.1 to inject malicious PHP code via the 'insert_php' plugin. The PoC demonstrates how an attacker can embed remote PHP inclusion payloads into a post's content, leading to remote code execution (RCE).