EIP-2026-114254

This exploit demonstrates a SQL injection vulnerability in the WordPress WP-Forum plugin version 1.7.8. The exploit leverages an unvalidated 'thread' parameter in 'forum_feed.php' to extract user credentials from the 'wp_users' table.