https://blog.wpsec.com/sql-injection-and-csrf-security-vulnerability-in-loginizer/