Input validation vulnerability in wpForo Forum 2.4.9

The wpForo Forum plugin for WordPress has a security issue called SQL Injection that affects all versions up to 2.4.9. This happens because the plugin does not properly protect user input and does not properly prepare the SQL query. As a result, people with Subscriber-level access or higher can add their own queries to the existing ones, which could potentially access private information from the database.