This vulnerability in VibeThemes VibeBP (versions before 1.9.9.5.1) involves improper neutralization of special elements used in SQL commands, leading to SQL Injection. The CVSS 3.1 score of 8.5 indicates it is exploitable remotely over the network with low attack complexity and requires low privileges but no user interaction. The impact is a confidentiality breach with limited integrity impact and low availability impact. No patch or vendor advisory is currently provided, and no known exploits have been reported.

Successful exploitation could allow an attacker to access sensitive information from the database (high confidentiality impact) without altering data integrity and with limited denial of service (low availability impact). The vulnerability requires low privileges and no user interaction, increasing the risk of exploitation. However, no known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected VibeBP versions and monitoring for unusual database activity. Avoid exposing the vulnerable application to untrusted networks where possible.