This vulnerability (CVE-2025-31044) in AA-Team Premium SEO Pack is classified as CWE-89, indicating improper neutralization of special elements in SQL commands, leading to SQL Injection. It affects Premium SEO Pack versions up to 3.3.2. The CVSS 3.1 score is 8.5 (high), with an attack vector of network, low attack complexity, requiring low privileges and no user interaction. The impact scope is changed (S:C), with high confidentiality impact, no integrity impact, and low availability impact. There are no known exploits in the wild and no patch or vendor advisory information is currently provided.

Successful exploitation could allow an attacker with low privileges to execute unauthorized SQL commands on the affected system, potentially leading to disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity is not impacted according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is currently available. Users should monitor the vendor's communications for updates and consider restricting access to the affected plugin until a fix is released.