Input validation vulnerability in Order Your Posts Manually 2.2.5

The Order Your Posts Manually plugin for WordPress is vulnerable to a type of attack called SQL Injection. This type of attack can be used by someone who has administrator-level access to the WordPress website and can allow them to gain access to private information stored in the website’s database. Versions of the plugin up to and including 2.2.5 are vulnerable due to the lack of proper security measures.