Authenticated SQL Injection (SQLi) vulnerability discovered by Syed Sheeraz Ali (Codevigilant) in WordPress Cashtomer plugin (versions <= 1.0.0).
Deactivate and delete. This plugin has been closed as of May 13, 2021 and is not available for download. Reason: Security Issue.