EIP-2026-114141

This is a writeup describing an unauthenticated SQL injection vulnerability in the Ultimate Product Catalogue WordPress plugin (versions < 3.1.2). The vulnerability is in the 'SingleProduct' parameter and was fixed in version 3.1.3.