Daisycon prijsvergelijkers <= 4.8.4 is vulnerable to SQL Injection vulnerability

The Daisycon prijsvergelijkers plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 4.8.4 due to insufficient escaping on the profile_id user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.