WordPress Sliced Invoices plugin versions 3.8.2 and below suffer from a remote SQL injection vulnerability.