Input validation vulnerability in Jquery news ticker 3.0

The Jquery news ticker plugin for WordPress is vulnerable to a type of attack called SQL Injection when used with versions 3.0 or lower. This type of attack allows users with subscriber-level or higher access to add additional queries to the existing ones which can then be used to access sensitive information from the database. To protect against this, the user supplied parameter must be properly escaped and the existing SQL query must be prepared.