The vulnerability identified as CVE-2024-51606 exists in the Blrt WP Embed WordPress plugin (versions up to 1.6.9). It is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS 3.1 base score is 8.5, indicating high severity, with an attack vector of network, low attack complexity, requiring low privileges, no user interaction, and a scope change. The impact includes high confidentiality loss and low availability impact, with no integrity impact. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

Successful exploitation could allow an attacker with low privileges to execute unauthorized SQL commands on the affected system, potentially leading to disclosure of sensitive information (confidentiality impact) and partial denial of service (availability impact). Integrity is not impacted according to the CVSS vector. The vulnerability affects all installations of Blrt WP Embed up to version 1.6.9.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the Blrt WP Embed plugin if it is not essential. Monitor official Blrt communications for updates on patches or mitigations.