This vulnerability in WPFunnels Mail Mint (<= 1.18.6) is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS vector (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L) indicates that the attack can be performed remotely over the network with low attack complexity, requires high privileges, no user interaction, and results in high confidentiality impact, no integrity impact, and low availability impact with scope changed. No patch or vendor advisory is currently provided, and no known exploits are reported.

An attacker with high privileges could exploit this SQL Injection vulnerability remotely to access sensitive database information, leading to a high confidentiality impact. The vulnerability does not affect data integrity but may cause limited availability impact. Since the scope is changed, the vulnerability could affect resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should restrict high-privilege access to the affected Mail Mint installations and monitor for unusual database activity. No vendor advisory or patch links are currently provided.