EIP-2026-114060

The exploit demonstrates a SQL injection vulnerability in the 'Single Personal Message' WordPress plugin (v1.0.3) via the 'message' parameter, which is not properly escaped. The PoC provides a crafted URL that extracts data from the 'wp_terms' table.