CVE-2015-9398

The GoCodes WordPress plugin (<= 1.3.5) is affected by a SQL injection in wp-admin/tools.php gcid, per CVE-2015-9398. Connected sources also describe an Authenticated XSS and Blind SQL Injection in the same plugin (GoCodes