EIP-2026-113988
PRE-CVEWordPress Plugin ProPlayer 4.7.7 - SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113988. PoCs published by Miroslav Stampar.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the ProPlayer WordPress plugin (version 4.7.7 or earlier). The vulnerable code directly interpolates user-controlled input (`$_GET['pp_playlist_id']`) into a SQL query without sanitization, allowing an attacker to inject arbitrary SQL commands.
Description
WordPress Plugin ProPlayer 4.7.7 - SQL Injection
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the ProPlayer WordPress plugin (version 4.7.7 or earlier). The vulnerable code directly interpolates user-controlled input (`$_GET['pp_playlist_id']`) into a SQL query without sanitization, allowing an attacker to inject arbitrary SQL commands.