CVE-2024-12015: Improper Neutralization of Special Elements used in an SQL Command

The 'Project Manager' WordPress Plugin is affected by an authenticated SQL injection vulnerability in the 'orderby' parameter in the '/pm/v2/activites' route...