CVE-2023-6030

The LogDash Activity Log WordPress plugin (versions prior to 1.1.4 ) is vulnerable to SQL injection because it fails to properly escape the username parameter when logging failed login attempts via the wp_login_failed function (located in src/Hooks/Users.php). An unauthenticated attacker can expl...