EIP-2026-113480

The provided text describes a SQL injection vulnerability in WordPress's blog.header.php script, where insufficient sanitization of the 'cat' and 'order_by' URI parameters allows an attacker to inject malicious SQL code. The example URL demonstrates a basic SQLi payload.