WordPress Kama Click Counter plugin version 3.4.9 suffers from a remote blind SQL injection vulnerability.