Ultimate Product Catalogue <= 3.1.2 - Unauthenticated SQL Injection

Description

Unauthenticated SQL injection in ajax call when the plugin is counting the times a product is being seen by the web visitors. The vulnerable POST parameter is "Item_ID".

Vulnerable code:

In file Functions/Process_Ajax.php line 67:

[...]
$Item_ID = $_POST['Item_ID'];
$Item = $wpdb->get_row("SELECT Item_Views FROM $items_table_name WHERE Item_ID=". $Item_ID);
[...]