EIP-2026-113781

This exploit demonstrates a SQL injection vulnerability in the WordPress GD Star Rating plugin (version <= 1.9.10) via the 'export.php' script. The PoC uses a crafted URL to inject malicious SQL into the 'de' parameter, bypassing authentication and executing arbitrary SQL queries.