The vulnerability CVE-2024-49616 involves improper neutralization of special elements in SQL commands within the nyasro Rate Own Post plugin. This flaw allows an attacker with low privileges to conduct blind SQL injection attacks, potentially exposing sensitive data (confidentiality impact is high) and causing limited denial of service (availability impact is low). The vulnerability affects versions up to 1.0. There is no vendor advisory or patch information provided at this time.

Successful exploitation could allow an attacker with low privileges to extract sensitive information from the database without user interaction (blind SQL injection). The confidentiality impact is high, meaning sensitive data could be disclosed. Integrity impact is not indicated, and availability impact is low, suggesting limited disruption to service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable functionality to trusted users only and monitor for unusual database activity related to the Rate Own Post plugin.