WordPress Simple Personal Message plugin <= 1.0.3 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Lenon Leite in WordPress Plugin Single Personal Message versions = 1.0.3...