WordPress File Groups 1.1.2 SQL Injection

Exploit Title: WordPress File Groups plugin getcol"select guid from wpposts where postparent = $fgid";...