EIP-2026-114200

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress 'Work the Flow File Upload' plugin (version 2.5.2). The PoC uses a cURL command to upload a malicious PHP file (backdoor.php) to the server, achieving remote code execution (RCE).