There are plugins specifically designed for identifying SQL Injections. For example – WPScan or Sucuri Site Check are great tools you can use. Besides that, you should update your WordPress and the related plugins or themes you think could be linked to this problem. You can check past SQL injection attacks to see which plugins are the ones you should pay the most attention to.