EIP-2026-114227

The code describes an SQL injection vulnerability in the WP Private Messages WordPress plugin, where insufficient sanitization of user-supplied data in the 'msgid' parameter allows attackers to manipulate SQL queries. The provided URL demonstrates the injection point but lacks functional exploit code.