EIP-2026-114341

This exploit demonstrates a CSRF vulnerability in the WordPress Make A Statement theme, allowing unauthenticated file uploads via a crafted HTML form. The uploaded file can be accessed in the uploads directory, potentially leading to remote code execution.