This vulnerability in the WP Mailster plugin (versions <= 1.8.16.0) arises from improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. The CVSS 3.1 base score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No patch or official fix information is provided in the available data.

Successful exploitation could allow an attacker with low privileges to extract sensitive information from the database through Blind SQL Injection, impacting confidentiality. The vulnerability does not affect data integrity but may cause limited availability issues. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected plugin and monitor for suspicious activity related to SQL injection attempts. Avoid granting unnecessary privileges to users interacting with WP Mailster.