$ 0 0 WordPress WP e-Commerce plugin versions 3.8.6 and below suffer from a remote SQL injection vulnerability.