The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.Referenceshttps://wordpress.org/plugins/loginpress/#developershttps://www.webarxsecurity.com/loginpress-plugin/
