EIP-2026-114221

The exploit demonstrates an arbitrary file upload vulnerability in WP Mobile Detector <=3.5, allowing attackers to upload malicious PHP files via the 'resize.php' script. The uploaded file is saved in the cache directory, enabling remote code execution.