EIP-2026-114256

The writeup describes an arbitrary file upload vulnerability in the wp-imagezoom WordPress plugin (version 1.1.0) via the `div_img.php` file, allowing remote image uploads and directory manipulation. It includes technical details about the vulnerable parameters (`src`, `cmd`) and their effects.