CVE-2017-12650: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header...