EIP-2026-113950

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress Peugeot Music plugin (v1.0) via a CSRF attack. It uploads a malicious file (e.g., a PHP shell) to the target server by exploiting an insecure upload endpoint.