The Simple Job Manager plugin (versions up to 1.1) by oleksandr87 contains an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. This flaw allows an attacker with network access and low privileges to execute crafted SQL commands that can lead to partial denial of service and compromise confidentiality. The vulnerability has a CVSS 3.1 base score of 8.5, reflecting its high severity and potential impact. No official patch or remediation guidance has been provided by the vendor as of the published date.

Successful exploitation could allow an attacker to execute unauthorized SQL commands, potentially leading to partial denial of service and disclosure of sensitive information. The vulnerability does not require user interaction but does require low privileges. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing the affected plugin to untrusted networks and restrict access to trusted users only. Monitor for updates from the vendor regarding patches or mitigations.