EIP-2026-114355

This PHP script exploits an arbitrary file upload vulnerability in the This Way Theme for WordPress by sending a POST request with a local file to the vulnerable endpoint. The lack of input sanitization allows an attacker to upload and potentially execute arbitrary code on the server.