EIP-2026-114136

This exploit demonstrates a privilege escalation vulnerability in WordPress Ultimate Product Catalog <=3.8.1. It allows users with contributor, editor, or author roles to escalate their privileges to administrator by sending a crafted POST request to the vulnerable `access_role` parameter.