EIP-2026-113705

This exploit demonstrates a SQL injection vulnerability in WordPress WP e-Commerce plugin <= 3.8.6 via the 'cs1' POST parameter, leveraging a time-based blind SQLi technique. The exploit bypasses a weak hash validation mechanism due to a default empty salt value.