EIP-2026-113902

The exploit demonstrates a SQL injection vulnerability in the WordPress MM Duplicate plugin (v1.2) via the 'post' parameter, allowing arbitrary SQL execution through a crafted GET request. The vulnerable code directly interpolates user input into a SQL query without sanitization.