EIP-2026-113617

The exploit details a SQL injection vulnerability in the Calculated Fields Form WordPress plugin (version <= 1.0.10). It provides URLs demonstrating SQLi via the 'u', 'name', 'c', and 'd' parameters, but lacks executable code.