EIP-2026-113548

This is a functional proof-of-concept for an authenticated SQL injection vulnerability in the WordPress plugin Ajax Load More (version <= 5.3.1). The exploit demonstrates how an attacker can inject malicious SQL payloads via the 'repeater' parameter in an authenticated POST request to admin-ajax.php.