EIP-2026-114306

This exploit demonstrates an unauthenticated configuration manipulation vulnerability in the Archin WordPress Theme. It allows an attacker to modify WordPress settings, such as enabling user registration with administrator privileges, by sending crafted POST requests to a vulnerable AJAX endpoint.