[Fyren]

If you don't know how to write SP, you should just find a different plugin because that one is insecure.

If you can or someone cares enough to fix it, it should not use plain Format/FormatEx to create SQL queries because that leads to SQL injection vulnerabilities.