EIP-2026-114234
PRE-CVEWordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114234. PoCs published by Mansoor R.
AI-analyzed exploit summary This script demonstrates an unauthenticated time-based blind SQL injection vulnerability in WordPress Plugin WP Statistics versions 13.0 to 13.0.7. It includes both a version check and an exploit function that sends a crafted payload to trigger a sleep command in the database.
Description
WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)
Exploits (1)
This script demonstrates an unauthenticated time-based blind SQL injection vulnerability in WordPress Plugin WP Statistics versions 13.0 to 13.0.7. It includes both a version check and an exploit function that sends a crafted payload to trigger a sleep command in the database.