EIP-2026-113753

This exploit demonstrates a SQL injection vulnerability in WordPress FireStorm Professional Real Estate plugin version 2.06.01. The PoC provides a crafted URL that extracts user credentials from the wp_users table via a UNION-based SQL injection attack.