This vulnerability (CVE-2024-43942) in Wpsoul Greenshift Query and Meta Addon involves improper neutralization of special elements used in SQL commands (CWE-89), leading to SQL Injection. The issue affects versions prior to 3.9.2 and allows an attacker with low privileges and no user interaction to perform SQL Injection attacks that can compromise confidentiality and cause limited availability impact. The CVSS 3.1 base score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and high confidentiality impact with no integrity impact and low availability impact. No patch or official remediation level has been published yet.

Successful exploitation could allow an attacker with low privileges to execute unauthorized SQL commands on the affected system, potentially leading to disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). There is no indication of integrity impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected plugin and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the plugin to untrusted users or networks where possible.