WordPress SP Client Document Manager 2.4.1 SQL Injection

WordPress SP Client Document Manager plugin version 2.4.1 suffers from multiple remote SQL injection vulnerabilities.