Sql injection

The simple-login-log plugin before 1.1.2 for WordPress has SQL injection...

CVE-2017-18573

The CVE-2017-18573 entry concerns the WordPress plugin simple-login-log, vulnerable to SQL injection in versions before 1.1.2. The issue’s root cause is improper handling of SQL queries in the login-logging functionality, enabling an attacker to inject SQL commands. Several connected records (Red...