EIP-2026-114010

This is a vulnerability writeup describing an arbitrary file-upload vulnerability in the Rich WidgetPlugin for WordPress. It allows an attacker to upload and execute arbitrary PHP code in the context of the web server process.