The vulnerability CVE-2024-49244 affects the vrinsoft CSV Product Import Export plugin for WooCommerce (versions up to 1.0.0). It is caused by improper neutralization of special elements in SQL commands, leading to an SQL Injection flaw. This allows potential attackers to inject malicious SQL code through the plugin's input handling, potentially compromising the underlying database. No CVSS score or patch information is currently provided. The vulnerability is published and assigned by Patchstack, with no known active exploitation reported.

Successful exploitation of this SQL Injection vulnerability could allow an attacker to execute arbitrary SQL commands on the affected database. This may lead to unauthorized data disclosure, modification, or deletion within the WooCommerce environment using this plugin. The exact impact depends on the database privileges of the application and the attacker's capabilities. No known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor the vendor's communications for updates. Until a patch is available, consider restricting access to the plugin's import/export functionality and validating or sanitizing inputs where possible to reduce risk.