EIP-2026-113572

The exploit demonstrates an SQL injection vulnerability in the Auctions plug-in for WordPress by injecting a malicious SQL query via the 'download_key' parameter. The payload uses a time-based blind SQLi technique with BENCHMARK and MD5 functions to confirm vulnerability.