EIP-2026-114121

This exploit demonstrates an arbitrary file upload vulnerability in WordPress Top Quark Architecture plugin version 2.10. It uses cURL to upload a local shell file to a vulnerable endpoint via a path traversal technique in the batch_id parameter.