EIP-2026-114188

This exploit demonstrates a time-based blind SQL injection vulnerability in the WordPress Welcart e-Commerce plugin version 2.0.0. The POST parameter 'search[order_column][0]' is vulnerable due to insufficient input sanitization, allowing attackers to execute arbitrary SQL queries.