WordPress Ajax Store Locator versions 1.2 and below suffer from a remote SQL injection vulnerability. Continue reading...