EIP-2026-113639

This exploit demonstrates a SQL injection vulnerability in the WordPress Comment Rating plugin (version 2.9.32) via the HTTP_X_FORWARDED_FOR header. The exploit manipulates the header to inject malicious SQL into an UPDATE query, allowing arbitrary data retrieval or manipulation.