EIP-2026-114294

The provided text describes an arbitrary file-upload vulnerability in the Zingiri Web Shop WordPress plugin, allowing attackers to upload malicious files and potentially execute arbitrary code. The vulnerability is due to inadequate file validation in the plugin's file manager component.