This vulnerability (CVE-2024-50465) is an instance of CWE-89, improper neutralization of special elements used in an SQL command, in the Premium SEO Pack plugin for WP SEO – Calin Vingan. It affects all versions up to 1.6.001. The vulnerability allows an attacker with network access and low privileges to perform SQL injection attacks without user interaction, resulting in a high impact on confidentiality and a low impact on availability. No official fix or vendor advisory is currently available, and no known exploits have been reported.

An attacker with low privileges can exploit this SQL injection vulnerability remotely to access or manipulate sensitive database information, leading to a high confidentiality impact. The integrity impact is not indicated, and availability impact is low. This could result in unauthorized data disclosure or partial service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin functionality and monitor for unusual database activity. Avoid using affected versions in production environments where possible.