EIP-2026-113936

PRE-CVE

WordPress Plugin Olimometer 2.56 - SQL Injection

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-113936. PoCs published by TAD GROUP.

AI-analyzed exploit summary This is a writeup describing an SQL injection vulnerability in the Olimometer WordPress plugin. It details the vulnerable parameter, exploitation method using SQLMap, and potential impact, but does not include executable exploit code.

Description

WordPress Plugin Olimometer 2.56 - SQL Injection

Exploits (1)

exploitdb WRITEUP VERIFIED

by TAD GROUP · textwebappsphp

https://www.exploit-db.com/exploits/40804

View Code ZIP pw:eip

This is a writeup describing an SQL injection vulnerability in the Olimometer WordPress plugin. It details the vulnerable parameter, exploitation method using SQLMap, and potential impact, but does not include executable exploit code.

Classification

Writeup 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Olimometer Plugin for WordPress <= 2.56

No auth needed

Prerequisites: Access to the vulnerable WordPress plugin endpoint

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026