Description The visitors-online plugin before 0.4 for WordPress has SQL injection. References https://wordpress.org/plugins/visitors-online/#developers