This vulnerability (CVE-2024-37090) is an SQL Injection issue classified under CWE-89 in StylemixThemes Masterstudy Elementor Widgets and Consulting Elementor Widgets. It affects versions up to 1.2.2 and 1.3.0 respectively. The vulnerability allows improper neutralization of special elements used in SQL commands, which could be exploited remotely with low complexity and privileges, without user interaction. The CVSS 3.1 base score is 8.5, indicating high severity, with impact on confidentiality (high) and availability (low). No patch or official remediation guidance is currently available from the vendor.

Successful exploitation could allow an attacker to execute unauthorized SQL commands, potentially leading to partial denial of service and disclosure of sensitive information. The vulnerability affects confidentiality and availability but not integrity. No known active exploits have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the affected plugins and monitor for updates from StylemixThemes. No official fix or temporary workaround has been published.