EIP-2026-113760

This exploit demonstrates an SQL injection vulnerability in the FLV Player WordPress plugin by injecting a UNION-based query to extract user data from the `wp_users` table. The vulnerability arises from insufficient input sanitization in the `id` parameter.