EIP-2026-113704

This PHP script exploits a SQL injection vulnerability in WP e-Commerce plugin versions <= 3.8.4. It injects a malicious SQL query via the 'collected_data' POST parameter to extract user credentials from the WordPress database.