EIP-2026-113927

This exploit demonstrates an arbitrary file upload vulnerability in the NextGEN Gallery WordPress plugin, allowing attackers to upload a malicious PHP file disguised as an image. The uploaded file contains a simple command execution interface, enabling remote code execution.