EIP-2026-114170

The exploit demonstrates a blind SQL injection vulnerability in WordPress Video Player plugin versions 1.5.16 and earlier. It leverages improper sanitization in the ORDER BY clause, allowing a logged-in Contributor to extract arbitrary data from the WordPress database.