EIP-2026-113906

This exploit demonstrates a CSRF vulnerability in the WordPress More Fields Plugin 2.1, allowing an attacker to add or delete boxes via crafted HTML forms. The PoC includes specific form submissions targeting the plugin's admin endpoints without requiring CSRF tokens.