This vulnerability in the Cart tracking for WooCommerce plugin by wpdever is due to improper neutralization of special elements in SQL commands, leading to SQL Injection. It affects versions up to 1.0.16. The CVSS vector indicates network attack vector, low attack complexity, requires high privileges, no user interaction, and impacts confidentiality and availability with a scope change. No patch or vendor advisory details are available to confirm remediation status.

An attacker with high privileges could exploit this SQL Injection vulnerability to compromise the confidentiality of the database and cause partial availability disruption. The integrity impact is not indicated. There is no evidence of active exploitation in the wild. The vulnerability could allow unauthorized data access or manipulation within the affected plugin's database context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and limit user privileges to reduce risk. Monitor for vendor updates or security advisories regarding this vulnerability.