EIP-2026-114081

The exploit demonstrates XSS, SQL injection, and HTTP Parameter Pollution vulnerabilities in the WordPress Spider Calendar plugin version 1.0.1. It includes crafted URLs to trigger these vulnerabilities without requiring authentication.