WordPress LeagueManager 3.9.11 SQL Injection

WordPress LeagueManager plugin version 3.9.11 suffers from a remote SQL injection vulnerability.