Description The note-press plugin before 0.1.2 for WordPress has SQL injection. References https://wordpress.org/plugins/note-press/#developers