This vulnerability in the pankajpragma WordPress Google Map Professional plugin (<= 1.0) allows SQL Injection due to improper neutralization of special elements in SQL commands. The CVSS 3.1 score is 8.5, indicating high severity with network attack vector, low attack complexity, requiring low privileges but no user interaction, and a scope change. The impact affects confidentiality (high) and availability (low), with no integrity impact. No patch or remediation information is available from the vendor or other sources at this time.

Successful exploitation could allow an attacker with low privileges to perform SQL Injection attacks, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity is not impacted according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.