This vulnerability (CVE-2024-35750) in wpdevart Responsive Image Gallery, Gallery Album plugin (up to version 2.0.3) is an SQL Injection issue classified under CWE-89. It allows an attacker with network access and low privileges to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. The CVSS 3.1 base score is 8.5, reflecting high confidentiality impact, no integrity impact, and low availability impact. The vulnerability is published but no official fix or patch is currently documented.

Successful exploitation could lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited denial of service (low availability impact). Integrity is not impacted. The attacker requires low privileges and no user interaction, increasing the risk. However, no known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should limit exposure by restricting access to the affected plugin and monitoring for updates from wpdevart. Avoid using affected versions in sensitive environments until a patch is released.