Input validation vulnerability in Hostel 1.1.5.6

The Hostel plugin for WordPress has a security flaw that allows attackers to access sensitive information from the database. This vulnerability exists in versions 1.1.5.6 and below because the plugin does not properly protect against SQL Injection attacks. This means that people with administrator access or higher can add their own commands to existing queries, potentially causing harm.