EIP-2026-114263

The provided text describes an SQL injection vulnerability in the WP-Realty plugin for WordPress, where the 'listing_id' parameter in the 'contact_friend' action is not properly sanitized. It includes example URLs demonstrating the vulnerability but lacks actual exploit code.