WordPress YAWPP Plugin <= 1.2 - Multiple SQL Injection

Because of these vulnerabilities, remote authenticated users can execute arbitrary SQL commands via vectors related to admin_functions.php.

Solution

           Update the plugin.