WordPress Appointment Booking Calendar 1.1.7 SQL Injection

WordPress Appointment Booking Calendar plugin 1.1.7 suffers from a remote SQL injection vulnerability.