WordPress Freshmail Plugin <= 1.5.8 - SQL Injection

Freshmail plugin is prone to an SQL injection that exists in "id" parameter via shortcode.php. It allows to insert shortcodes without administrator's permission when page is editing. Solution Update the plugin...