EIP-2026-113909

This exploit targets a file upload vulnerability in the WordPress MStore API plugin (version 2.0.6 or lower). It allows arbitrary file upload by sending a POST request to the vulnerable endpoint with a malicious file disguised as a JSON configuration file.