WordPress ViewMedica Embed plugin <= 1.4.15 - Cross-Site Request Forgery to SQL Injection vulnerability

Cross-Site Request Forgery to SQL Injection vulnerability discovered by minhtuanact in WordPress Plugin ViewMedica 9 versions = 1.4.15...