The chenyenming Woocommerce Quote Calculator plugin (version <= 1.1) contains an SQL Injection vulnerability caused by improper neutralization of special elements in SQL commands. This weakness allows an unauthenticated attacker to perform Blind SQL Injection attacks remotely, potentially exposing sensitive information from the backend database. The vulnerability has a CVSS v3.1 base score of 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and a significant confidentiality impact.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information from the database (high confidentiality impact). Integrity is not impacted, and availability impact is low. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is currently available. Users of the affected plugin should monitor the vendor's communications for updates and consider disabling or removing the plugin until a fix is released.