WordPress Easy2Map-Photos plugin version 1.09 suffers from a remote SQL injection vulnerability.