The vulnerability CVE-2025-30589 in Dourou Flickr set slideshows (<= 0.9) is an SQL Injection issue caused by improper neutralization of special elements in SQL commands. It allows an attacker with network access and low privileges to execute SQL commands that can compromise confidentiality significantly and availability to a lesser extent. The CVSS 3.1 base score is 8.5, reflecting high severity with attack vector network, low attack complexity, no user interaction, and scope changed. No known exploits are reported in the wild, and no patch or remediation information is currently available.

Successful exploitation could lead to unauthorized disclosure of sensitive data (high confidentiality impact) and limited disruption of service (low availability impact). Integrity is not impacted according to the CVSS vector. The vulnerability requires low privileges but no user interaction, making it relatively accessible to attackers with network access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict network access to the affected component and monitor for unusual database activity. Avoid exposing the vulnerable plugin publicly if possible.