EIP-2026-113598

This is a proof-of-concept for an SQL injection vulnerability in the Booking Calendar WordPress Plugin. The exploit demonstrates how an attacker can extract hashed passwords from the database by manipulating the 'wh_booking_id' parameter.