EIP-2026-113519

This exploit demonstrates a SQL injection vulnerability in the WordPress A to Z Category Listing plugin (version <= 1.3). The vulnerability arises from unsanitized user input in the 'R' parameter, allowing arbitrary SQL execution via a crafted HTTP request.