EIP-2026-113960

This exploit demonstrates an arbitrary file upload vulnerability in WordPress Pica Photo Gallery 1.0. It uses cURL to upload a local file (info.php) to the vulnerable endpoint, allowing remote code execution via the uploaded file.