WordPress Dmsguestbook plugin suffers from a remote unauthenticated data injection vulnerability.