EIP-2026-114326

This exploit demonstrates a CSRF vulnerability in the WordPress Euclid V1 theme, allowing unauthorized file uploads via a crafted HTML form. The uploaded file can be accessed in the uploads directory, potentially leading to remote code execution.