This vulnerability involves improper neutralization of special elements in SQL commands within the ClickandPledge WordPress-WPJobBoard plugin, enabling Blind SQL Injection attacks. It affects all versions up to and including 25.07010000-WP6.8.1-JB5.11.5. The CVSS 3.1 base score is 9.3, reflecting network attack vector, low attack complexity, no privileges or user interaction required, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No patch or official remediation guidance is currently provided. The vulnerability is publicly disclosed but not yet known to be exploited in the wild.

An attacker can exploit this vulnerability remotely without authentication to perform Blind SQL Injection, potentially exposing sensitive data (high confidentiality impact). The integrity of data is not impacted, but availability may be slightly affected (low impact). The scope change indicates that the vulnerability affects resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor ClickandPledge communications for updates. Until a fix is available, consider disabling or restricting access to the vulnerable plugin to reduce exposure.