EIP-2026-114165

This exploit demonstrates an unrestricted file upload vulnerability in the WordPress Users Ultra Plugin (version 1.5.50). The PoC uploads a CSV file with arbitrary data, exploiting insufficient file validation to potentially trigger XSS or other attacks.