CVE-2020-15363: Improper Neutralization of Special Elements used in an SQL Command

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...