EIP-2026-113899

This is a functional CSRF exploit for WordPress MiwoFTP Plugin 1.0.5 that leverages a logic error to create an arbitrary PHP file (wp-comments.php) with a malicious payload, leading to remote code execution when an admin visits a crafted link.