Merge pull request #1659 from ultimatemember/fix/1654_additional

Enhance SQL injection protection in regex patterns

includes/core/class-member-directory.php

@@ -1710,7 +1710,8 @@ if ( ! class_exists( 'um\core\Member_Directory' ) ) {
 			$regexp_map = array(
 				'/select(.*?)from/im',
 				'/select(.*?)sleep/im',
-				"/sleep\(\d+\)/im", // avoid any sleep injections
+				"/sleep\([^)]+\)/im", // avoid any sleep injections
+				"/benchmark\([^)]+\)/im", // avoid any benchmark injections
 				'/select(.*?)database/im',
 				'/select(.*?)where/im',
 				'/update(.*?)set/im',