wpDataTables < 3.4.1 - Unauthenticated SQL Injection

Description

In the default configuration, a simple table can be published in a page that does not require authentication. The table can be searched, and is vulnerable to SQL Injection via the order parameter. An unauthenticated user visiting the page where the table is published can perform a SQL injection attack in the table search parameter order[0][dir]

Note: This affect the premium version of the plugin, however, both the premium and free plugins have the same slug.