This vulnerability in WP Guru's Error Log Viewer plugin (versions <= 1.0.5) involves improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. An attacker with network access and low privileges can exploit this to extract sensitive information from the database without requiring user interaction. The CVSS 3.1 base score is 8.5, reflecting high severity due to network attack vector, low attack complexity, and high confidentiality impact. The vulnerability is confirmed published but lacks an official patch or vendor advisory detailing remediation.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the database (confidentiality impact). Integrity is not impacted, and availability impact is low. The vulnerability requires low privileges and no user interaction, increasing the risk of exploitation. No known exploits are reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the plugin and limit user privileges where possible to reduce exposure. Monitor official WP Guru communications for updates regarding fixes.