EIP-2026-114330

PRE-CVE

WordPress Theme GeoPlaces3 - Arbitrary File Upload

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114330. PoCs published by Mdn_Newbie.

AI-analyzed exploit summary This exploit demonstrates an arbitrary file upload vulnerability in the WordPress GeoPlaces3 theme by leveraging a vulnerable upload endpoint. It uses cURL to send a file to the server, potentially allowing remote code execution if the uploaded file is executable.

Description

WordPress Theme GeoPlaces3 - Arbitrary File Upload

Exploits (1)

exploitdb WORKING POC
by Mdn_Newbie · textwebappsphp
https://www.exploit-db.com/exploits/37956

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress GeoPlaces3 theme by leveraging a vulnerable upload endpoint. It uses cURL to send a file to the server, potentially allowing remote code execution if the uploaded file is executable.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: WordPress GeoPlaces3 theme (version unspecified)
No auth needed
Prerequisites: Access to the vulnerable WordPress theme endpoint · Ability to send HTTP POST requests to the target server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026