EIP-2026-113935

The exploit demonstrates a SQL injection vulnerability in the WordPress OdiHost Newsletter plugin <= 1.0. The vulnerable code directly interpolates user-controlled input (`$_GET['id']`) into a SQL query without sanitization, allowing for time-based blind SQL injection via the `BENCHMARK` function.