EIP-2026-113789

The exploit demonstrates a SQL injection vulnerability in the WordPress Global Content Blocks plugin (version <= 1.2) via the 'gcb' parameter in gcb_export.php. The vulnerable code directly interpolates user input into a SQL query without proper sanitization, allowing arbitrary SQL execution.