The vulnerability identified as CVE-2025-47640 affects the Printcart Web to Print Product Designer plugin for WooCommerce (versions up to 2.4.0). It is an SQL Injection vulnerability caused by improper neutralization of special elements used in SQL commands. This allows remote attackers to execute SQL commands without authentication or user interaction, potentially leading to unauthorized disclosure of sensitive data. The CVSS 3.1 score is 9.3, reflecting critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. There is no vendor advisory or patch link provided, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the affected system, leading to unauthorized disclosure of sensitive information. The confidentiality impact is rated high, while integrity impact is none and availability impact is low. No known exploits have been reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor the vendor's communications closely. Until a fix is available, consider restricting access to the affected plugin or disabling it if feasible to reduce exposure.