The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection.
https://wpvulndb.com/vulnerabilities/9475
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5025
https://ajdg.solutions/2019/07/11/adrotate-pro-5-3-important-update-for-security-and-ads-txt/