WordPress Houzez CRM plugin <= 1.4.2 - Authenticated (Seller+) SQL Injection vulnerability

Authenticated Seller+ SQL Injection vulnerability discovered by István Márton in WordPress Plugin Houzez CRM versions = 1.4.2...