EIP-2026-113945

This PHP script exploits a remote file upload vulnerability in the WordPress 'page-flip-image-gallery' plugin by sending a crafted POST request to upload.php, allowing arbitrary file upload. The exploit leverages cURL to upload a file named 'file.php' to the target server.