EIP-2026-114135

This exploit targets the Ultimate Membership Pro WordPress Plugin (version 3.3) with unauthenticated blind SQL injection and payment bypass vulnerabilities. It includes functionality for both SQLi via a time-based blind technique and arbitrary payment level assignment for users.