EIP-2026-114323

This exploit demonstrates a CSRF vulnerability in the WordPress Dimension theme, allowing unauthorized file uploads via a crafted HTML form. The uploaded file can be accessed in the uploads directory, potentially leading to remote code execution.