This vulnerability in solwininfotech WP Social Stream Designer (up to version 1.3) involves improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. An attacker with high privileges can exploit this to extract sensitive data from the backend database without user interaction. The CVSS 3.1 score is 7.6, reflecting network attack vector, low attack complexity, required privileges, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation could allow an attacker with high privileges to extract sensitive information from the database (high confidentiality impact) and cause limited disruption to availability (low impact). There is no indication of integrity compromise. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, restrict high-privilege access to the affected plugin and monitor for suspicious activity related to SQL injection attempts.