WordPress Plugin post highlights 2.2 - SQL Injection

Exploit Title: WordPress post highlights plugin posts WHERE posttype='attachment' AND postparent='$id'";...