EIP-2026-114123

The exploit demonstrates a blind SQL injection vulnerability in the Wordpress plugin 'Traffic Analyzer' version 3.4.2. The vulnerability is exploited via the 'Referer' HTTP header, which is not properly sanitized before being used in a SQL query.