WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection