WordPress Supsystic Ultimate Maps plugin version 1.1.12 suffers from a remote SQL injection vulnerability.