EIP-2026-113591

The exploit demonstrates a SQL injection vulnerability in the BBS e-Franchise WordPress plugin (version 1.1.1) via the 'uid' GET parameter. The PoC provides a crafted URL that extracts data from the 'wp_terms' table, confirming the vulnerability.