WordPress Zephyr Project Manager plugin version 3.2.42 suffers from a remote SQL injection vulnerability.