EIP-2026-113762

The exploit demonstrates SQL injection vulnerabilities in the WordPress Form Maker plugin (version 1.12.24 and below) via two distinct PoC payloads. Both payloads leverage time-based blind SQL injection techniques (SLEEP) to confirm vulnerability, with one targeting the 'FormMakerSQLMapping' action and the other the 'generete_csv' action.