The vulnerability identified as CVE-2025-31059 affects the woobewoo WBW Product Table PRO plugin up to version 2.2.6. It is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. This allows remote attackers to execute unauthorized SQL queries without authentication or user interaction. The CVSS 3.1 base score is 9.3, reflecting critical severity with network attack vector and significant confidentiality impact. No patch or official remediation guidance is currently available, and the product is not a cloud service.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized disclosure of sensitive data (confidentiality impact) and partial denial of service (availability impact). Integrity impact is not indicated. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the affected plugin version to mitigate risk. Monitor vendor channels for updates and apply patches promptly once available.