Input validation vulnerability in WP Private Messages 1.0.1

The WP Private Messages plugin for WordPress has a security vulnerability that allows an authenticated attacker to access sensitive information from the database. This vulnerability exists in versions up to and including 1.0.1. It affects the ‘id’ parameter, which was not properly escaped and had an insufficiently prepared SQL query. This allowed the attacker to add additional SQL queries to existing ones.