EIP-2026-114153

The exploit demonstrates a blind SQL injection vulnerability in the UPM-POLLS WordPress plugin version 1.0.4. The 'PID' parameter in the GET request is not properly sanitized, allowing an attacker to extract database data by manipulating the SQL query.