WordPress IWantOneButton Plugin 3.0.1 - Multiple Vulnerabilities

There are several vulnerabilities in this plugin. First vulnerability type is SQL injection. The vulnerability exists because of failure in the "/wp-content/plugins/iwant-one-ihave-one/updateAJAX.php" script to properly clean up user-supplied input in "postid" variable. It allows an attacker to...