EIP-2026-104791

The exploit demonstrates a SQL injection vulnerability in the WordPress Polls plugin (version <=1.2.4) via the 'question_id' parameter in an HTTP POST request. The payload extracts database metadata, including table names and column names, from the information_schema.columns table.