Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input via $act before passing it into an SQL statement.
https://wordpress.org/plugins/add-edit-delete-listing-for-member-module/