Input validation vulnerability in Waiting: One-click countdowns 0.6.2

The Waiting: One-click countdowns plugin for WordPress is not secure in versions up to 0.6.2. This means that people with at least subscriber-level permissions can use a special kind of attack called ‘time-based SQL Injection’ to access sensitive information from the database. This is possible because the plugin does not properly secure the ‘pbc_down[meta][id]’ parameter of the pbc_save_downs AJAX action