This vulnerability (CVE-2024-32087) is an SQL Injection issue (CWE-89) in the ExportFeed.com Product Feed on WooCommerce for Google plugin, affecting versions through 3.5.7. It allows improper neutralization of special elements used in SQL commands, which can be exploited by an attacker with high privileges to cause a partial loss of availability and a complete loss of confidentiality. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and scope change. No patch or official remediation has been published yet.

An attacker with high privileges on the affected system could exploit this SQL Injection vulnerability to cause a complete loss of confidentiality and a partial loss of availability. This means sensitive data could be exposed or manipulated, and the service could be disrupted. However, exploitation requires high privileges, limiting the attack surface. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict high-privilege access to the affected plugin and monitor for unusual activity related to SQL commands. Avoid exposing the vulnerable plugin to untrusted users. Apply official patches promptly once released by ExportFeed.com.