EIP-2026-113965

This exploit demonstrates a remote file upload vulnerability in WordPress Plugin PicUploader 1.0. It uses cURL to upload a file named 'file.jpg' to the vulnerable endpoint, bypassing intended restrictions due to improper file handling.