EIP-2026-113874

This exploit demonstrates an arbitrary file upload vulnerability in WordPress Mac Photo Gallery 2.7. It uses cURL to upload a local shell file to the vulnerable endpoint, bypassing authentication and file type restrictions.