WordPress Ultimate Product Catalogue plugin version 4.2.2 suffers from a remote SQL injection vulnerability. Continue reading...