diff --git a/wp-includes/user.php b/wp-includes/user.php index d24c20b2d6..b28177fe6b 100644 --- a/wp-includes/user.php +++ b/wp-includes/user.php @@ -547,7 +547,7 @@ class WP_User_Query { if ( 'ID' == $col ) $searches[] = "$col = '$string'"; else - $searches[] = "$col LIKE '$string$wild_char'"; + $searches[] = "$col LIKE '" . like_escape($string) . "$wild_char'"; } return ' AND (' . implode(' OR ', $searches) . ')';