The SQL Chart Builder plugin for WordPress suffers from an SQL Injection vulnerability (CWE-89) in the 'arg1' parameter of the 'gvn_schart_2' shortcode in versions up to 2.3.6. Authenticated users with Contributor or higher privileges can exploit insufficient input sanitization and query preparation to append malicious SQL commands to existing queries. This vulnerability can lead to unauthorized disclosure of sensitive database information. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity, requiring privileges but no user interaction, and impacting confidentiality without affecting integrity or availability.

An attacker with Contributor-level or higher access can exploit this vulnerability to extract sensitive information from the database by injecting additional SQL queries. This compromises the confidentiality of the data stored in the WordPress database. There is no indication that integrity or availability are impacted. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict Contributor-level access carefully and monitor for suspicious activity related to the 'gvn_schart_2' shortcode usage. Avoid using the vulnerable plugin version if possible.