EIP-2026-113500

This is a detailed technical analysis of a SQL injection vulnerability in WordPress's do_trackbacks() function, including root cause analysis, exploitation steps, and a patch. The vulnerability allows authenticated users with specific capabilities to execute arbitrary SELECT queries.