The vulnerability CVE-2024-51623 affects the mehral WP EIS WordPress plugin (versions <= 1.3.3) and is classified as an SQL Injection due to improper neutralization of special elements in SQL commands. An attacker with low privileges can exploit this vulnerability remotely without user interaction, potentially causing a confidentiality breach and limited denial of service. The CVSS 3.1 base score is 8.5, reflecting high severity with network attack vector, low attack complexity, and no required user interaction. No patch or official remediation guidance is currently available.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is not indicated. The vulnerability can be exploited remotely by an attacker with low privileges without requiring user interaction, increasing the risk of compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected plugin functionality and monitoring for suspicious activity related to SQL injection attempts. Avoid using affected versions of the WP EIS plugin if possible.