The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via delete_records.Referenceshttps://github.com/YourAcclaim/block_acclaim/pull/18
