EIP-2026-113793

This exploit demonstrates an unauthenticated SQL injection vulnerability in the WordPress Good LMS plugin (version <= 2.1.4). The vulnerability arises from unsanitized user input in the 'id' parameter, which is directly concatenated into a SQL query, allowing arbitrary SQL execution.