EIP-2026-113971

This exploit demonstrates a union-based SQL injection vulnerability in the WordPress Poll Widget plugin version 1.0.7 and below. The vulnerability arises from unsanitized user input in the 'question_id' parameter, allowing an attacker to extract database information.