This vulnerability in Accordion Slider PRO arises from improper neutralization of special elements in SQL commands, enabling blind SQL injection attacks. It affects all versions up to 1.2. The CVSS score is 8.5, reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, and a scope change with high confidentiality impact and low availability impact. No vendor advisory or patch information is provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with low privileges to extract sensitive information from the database (high confidentiality impact) and cause limited disruption to availability. Integrity impact is not indicated. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access privileges to the plugin and monitor for updates from LambertGroup. No official patch or workaround information is currently available.