EIP-2026-114336

This PHP script exploits a file upload vulnerability in the Kiddo WordPress theme by sending a malicious file to the vulnerable endpoint. The exploit leverages cURL to upload a file named 'cyber.php' to the target server, potentially leading to remote code execution.