EIP-2026-114076

This exploit demonstrates a CSRF vulnerability in WordPress SolveMedia plugin 1.1.0, allowing an attacker to change the webmaster's SolveMedia API keys to their own, thereby stealing revenue. The PoC includes a crafted HTML form that submits malicious API keys to the vulnerable endpoint.