The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.Referenceshttps://wpvulndb.com/vulnerabilities/8316https://wordpress.org/plugins/wp-stats-dashboard/#developershttp://cinu.pl/research/wp-plugins/mail_468b117b2dc86cb3d2ae4b8c81884a99.html