https://www.officialhacker.com/sql-injection-vulnerability-found-in-wordpress-plugin/
SQL Injection Vulnerability Found In Wordpress Plugin Used By 300,000+ Sites