WordPress WP Travel plugin <= 11.4.0 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nhut Quang in WordPress Plugin WP Travel versions = 11.4.0...