When using the search plugin for easyblog, placing an apostrophe in the search term such as in a search for "bob's apples" throws an sql error, upon investigating it appears this is due to the value not being escaped leaving the plugin vulnerable to SQL injection attacks.