Input validation vulnerability in RapidResult 1.2

The RapidResult plugin for WordPress has a security issue that allows hackers to inject SQL commands using the ‘s’ parameter. This problem exists in all versions up to and including 1.2. It is caused by not properly accounting for user input and not properly preparing the SQL query. This means that someone with contributor-level permissions or higher can add their own SQL commands to existing ones and potentially access confidential information from the database.