EIP-2026-114035

This exploit demonstrates a CSRF vulnerability in the Sexy Add Template WordPress plugin, allowing an attacker to upload a malicious shell via a crafted HTML form. The vulnerability stems from the lack of proper request validation (e.g., missing wpnonce verification).