EIP-2026-114155

This exploit demonstrates an arbitrary file upload vulnerability in WordPress User Meta plugin version 1.1.1. It uses cURL to upload a file to the vulnerable endpoint, bypassing authentication and file type restrictions.