WordPress Ultimate Membership Pro plugin version 3.3 suffers from a remote SQL injection vulnerability.