This vulnerability in RealMag777 MDTF plugin versions <= 1.3.3.7 arises from improper neutralization of special elements in SQL commands, enabling SQL Injection attacks. The CVSS 3.1 score is 9.3 (critical), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and a scope change with high confidentiality impact. The vulnerability allows attackers to extract sensitive data from the database without affecting data integrity and with limited impact on availability. No known exploits in the wild have been reported, and no patch or official remediation guidance is currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the database, potentially exposing confidential data. The integrity of the data is not impacted, and availability impact is low. The vulnerability is exploitable remotely without authentication or user interaction, increasing risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or removing the affected MDTF plugin if feasible. Monitor vendor channels for updates and apply patches promptly once released.