EIP-2026-114201
PRE-CVEWordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114201. PoCs published by nopesled.
AI-analyzed exploit summary This exploit demonstrates an unrestricted file upload vulnerability in the Work the Flow File Upload WordPress plugin (v1.2.1). By manipulating the 'accept_file_types' parameter and filename extension in a POST request, an attacker can upload a malicious PHP file, leading to remote code execution.
Description
WordPress Plugin Work-The-Flow 1.2.1 - Arbitrary File Upload
Exploits (1)
This exploit demonstrates an unrestricted file upload vulnerability in the Work the Flow File Upload WordPress plugin (v1.2.1). By manipulating the 'accept_file_types' parameter and filename extension in a POST request, an attacker can upload a malicious PHP file, leading to remote code execution.