EIP-2026-113981

This exploit demonstrates an unauthenticated configuration access vulnerability in the WordPress Premium Gallery Manager plugin. It allows an attacker to modify WordPress settings, such as the admin email and default user role, by sending crafted POST requests to the vulnerable AJAX endpoint.