EIP-2026-113988

This exploit demonstrates a SQL injection vulnerability in the ProPlayer WordPress plugin (version 4.7.7 or earlier). The vulnerable code directly interpolates user-controlled input (`$_GET['pp_playlist_id']`) into a SQL query without sanitization, allowing an attacker to inject arbitrary SQL commands.