This vulnerability (CVE-2025-62015) in Advanced Coupons for WooCommerce Coupons arises from improper neutralization of special elements in SQL commands, commonly known as SQL Injection. It affects versions up to 4.6.8 of the plugin. The CVSS vector indicates network attack vector, low attack complexity, requires high privileges, no user interaction, scope changed, with high confidentiality impact and low availability impact. No official patch or remediation details are provided in the available data.

An attacker with high privileges on the affected system could exploit this SQL Injection vulnerability to compromise the confidentiality of the database, potentially accessing sensitive data. The impact on integrity is not indicated, and availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege access to the plugin and monitor for unusual database activity related to coupon management. Avoid exposing the plugin to untrusted users with elevated privileges.