This vulnerability involves improper neutralization of special elements in SQL commands within the acowebs Product Labels For Woocommerce plugin, allowing blind SQL injection. It affects all versions up to 1.5.8. The CVSS 3.1 score is 7.6, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change with high confidentiality impact and low availability impact. No vendor advisory or patch information is currently provided, and the plugin is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow an attacker with high privileges to extract sensitive information from the database (high confidentiality impact) and cause limited disruption to availability. Integrity impact is not indicated. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to high-privilege accounts and monitor for suspicious activity related to the plugin. Avoid exposing administrative interfaces unnecessarily.