EIP-2026-114009

This exploit demonstrates an unrestricted file upload vulnerability in WordPress Resume Submissions & Job Postings v2.5.1, allowing attackers to upload arbitrary files (e.g., PHP shells) to the server. The file name is predictable via MD5 hashing of the server timestamp, enabling direct access to the uploaded file.