EIP-2026-114330

This exploit demonstrates an arbitrary file upload vulnerability in the WordPress GeoPlaces3 theme by leveraging a vulnerable upload endpoint. It uses cURL to send a file to the server, potentially allowing remote code execution if the uploaded file is executable.