EIP-2026-113907

The code describes a SQL injection vulnerability in the WordPress plugin Motopress Hotel Booking Lite 4.2.4, specifically in the `sync-urls-repository.php` file. The `room_id` and `sync_id` parameters are vulnerable due to improper sanitization in the `insertUrls` function.