EIP-2026-114287

This exploit demonstrates a SQL injection vulnerability in the WordPress yolink Search plugin <= 1.1.4. The vulnerable code misuses the $wpdb->prepare() function, allowing an attacker to inject malicious SQL via the 'from_id' POST parameter.