EIP-2026-113777

PRE-CVE

WordPress Plugin G-Lock Double Opt-in Manager - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113777. PoCs published by BEASTIAN.

AI-analyzed exploit summary This HTML form demonstrates an SQL injection vulnerability in G-Lock Double Opt-in Manager for WordPress. The exploit sends a malformed JSON payload via the 'json' parameter to trigger the vulnerability, allowing arbitrary SQL query execution.

Description

WordPress Plugin G-Lock Double Opt-in Manager - SQL Injection

Exploits (1)

exploitdb WORKING POC VERIFIED

by BEASTIAN · htmlwebappsphp

https://www.exploit-db.com/exploits/37563

View Code ZIP pw:eip

This HTML form demonstrates an SQL injection vulnerability in G-Lock Double Opt-in Manager for WordPress. The exploit sends a malformed JSON payload via the 'json' parameter to trigger the vulnerability, allowing arbitrary SQL query execution.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: G-Lock Double Opt-in Manager for WordPress <= 2.6.2

No auth needed

Prerequisites: Access to the WordPress admin-ajax.php endpoint

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026