EIP-2026-113727

This exploit demonstrates a SQL injection vulnerability in the WordPress Eventify plugin (version <= 1.7.f) via the 'eventid' POST parameter. The vulnerable code directly interpolates user input into a SQL query without proper sanitization, allowing an attacker to extract sensitive database information such as user credentials, database version, and connection details.