Input validation vulnerability in SP Project & Document Manager 4.69

The SP Project & Document Manager plugin for WordPress has a security issue known as SQL Injection. This occurs when malicious code is inserted into the software, allowing attackers to access sensitive information from the database. This vulnerability exists in versions up to 4.69 of the plugin, due to the way user input is handled and the lack of proper preparation in the existing SQL query. This means that attackers with contributor-level access or higher can add their own queries to extract data from the database.