EIP-2026-113763

This exploit demonstrates an authenticated SQL injection vulnerability in the WordPress Form Maker plugin (version <= 5.4.1) via the 's' parameter in the blocked_ips_fm page. It includes a proof-of-concept HTTP request and SQLMap commands to exploit the vulnerability.