Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-114334. PoCs published by sil3nt.
AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in the Kakao theme for WordPress by injecting a malicious SQL query via the 'ID' parameter in 'sonHaberler.php'. The query extracts user credentials from the 'wp_users' table using 'group_concat'.
Description
WordPress Theme Kakao - 'ID' SQL Injection
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by sil3nt · textwebappsphp
https://www.exploit-db.com/exploits/38017
The exploit demonstrates an SQL injection vulnerability in the Kakao theme for WordPress by injecting a malicious SQL query via the 'ID' parameter in 'sonHaberler.php'. The query extracts user credentials from the 'wp_users' table using 'group_concat'.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
Kakao theme for WordPress
No auth needed
Prerequisites:
Access to the vulnerable WordPress site with the Kakao theme installed
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026