This vulnerability in Agile Logix Store Locator WordPress plugin (versions <= 1.5.1) is due to improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, and scope change with high confidentiality impact and low availability impact. No patch or vendor advisory is currently available, and the plugin is not a cloud service.

An attacker with high privileges on the affected WordPress installation could exploit this SQL Injection vulnerability to access or manipulate sensitive data in the backend database, impacting confidentiality. The availability impact is low, and integrity impact is not indicated. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and limit high-privilege user accounts. Monitor for updates from Agile Logix regarding a security patch.