EIP-2026-114031

This exploit targets a file upload vulnerability in the SEO Watcher WordPress plugin, allowing arbitrary PHP code execution by uploading a malicious file to the 'tmp-upload-images' directory. The exploit uses cURL to send a POST request with PHP shellcode, which can then be accessed via a GET parameter for remote command execution.