Secunia reported Popular Wordspew plugin to have an input vulnerability which can be exploited to inject SQL commands to your wordpress installation.
User supplied input to the parameter “id” could be exploited by malicious users to inject SQL.
Here is how a visitor to your site can inject SQL through the plugin:
From the URL of the browser, […]