EIP-2026-114304

This exploit demonstrates a CSRF vulnerability in the WordPress Amplus theme, allowing unauthenticated file uploads via a crafted form submission to 'upload-handler.php'. The uploaded file can be accessed in the 'uploads' directory, potentially leading to remote code execution if a malicious script is uploaded.