EIP-2026-113780

The exploit demonstrates an SQL injection vulnerability in the GD Star Rating WordPress plugin. It leverages unsanitized user input in the 'votes' parameter to extract user credentials (nicename, email, login, password) from the 'wp_users' table via a UNION-based SQLi attack.