EIP-2026-113576

The exploit demonstrates an unauthenticated SQL injection vulnerability in WordPress Automatic Plugin v2.0.3 via the csv.php file, allowing arbitrary SQL queries to be executed, such as creating a new admin user. The provided cURL command illustrates the attack vector.