EIP-2026-113807

The exploit demonstrates SQL injection vulnerabilities in WordPress HD Webplayer 1.1 via the 'id' parameter in config.php and 'videoid' parameter in playlist.php. It uses UNION-based SQLi to extract user credentials from the wp_users table.