EIP-2026-114315

This exploit targets a stored XSS vulnerability in the Bridge WordPress theme (version 9.1.3) to either enable maintenance mode or inject JavaScript to create an admin account. It requires valid WordPress credentials and uses cURL for authenticated POST requests.