Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.
dasinfomedia hospital management system -