EIP-2026-114037

This exploit demonstrates a SQL injection vulnerability in the WordPress SH Slideshow plugin <= 3.1.4. The vulnerable code directly interpolates user-controlled input into a SQL query without sanitization, allowing for time-based blind SQL injection via the 'id' parameter.