EIP-2026-113729

The exploit demonstrates SQL injection vulnerabilities in the WordPress Plugin Events Calendar (version 1.0) via the 'month' and 'year' parameters in AJAX queries. It includes payloads for boolean-based blind, time-based blind, and UNION-based SQL injection attacks.