EIP-2026-114114

This exploit demonstrates an unauthenticated privilege escalation vulnerability in TheCartPress WordPress plugin (versions <= 1.5.3.6). It sends a crafted POST request to the admin-ajax.php endpoint to create an administrator account without authentication.