The vulnerability CVE-2024-55980 exists in the robindkumar Wr Age Verification plugin (versions <= 2.0.0) and is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. This allows remote attackers to execute unauthorized SQL queries, potentially compromising sensitive data confidentiality and causing partial denial of service. The CVSS 3.1 vector indicates the attack can be performed remotely without authentication or user interaction and has a critical impact on confidentiality and a low impact on availability.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information from the database and partial denial of service conditions. The critical CVSS score reflects the potential for significant data confidentiality breaches. There is no indication of integrity impact. No known exploits have been reported in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once released.