EIP-2026-114292

This exploit targets a vulnerability in the Wordpress Zingiri Web Shop Plugin <= 2.2.3, allowing remote code execution by manipulating the $selectedDocuments array to write arbitrary PHP code into a file. The exploit establishes a shell by leveraging the vulnerable 'ajax_save_name.php' script.