EIP-2026-114039

This exploit demonstrates an SQL injection vulnerability in the ShiftThis Newsletter plugin for WordPress. It leverages unsanitized user input in the 'newsletter' parameter to extract user credentials from the database via a UNION-based SQLi attack.