This vulnerability in FooEvents for WooCommerce (<= 1.20.4) allows SQL Injection due to improper neutralization of special elements in SQL commands. An attacker with low privileges can exploit this remotely without user interaction to potentially access sensitive data (confidentiality impact is high). The vulnerability does not affect integrity but has a low impact on availability. There is no vendor advisory or patch information provided, and the product is not a cloud service, so remediation must be managed by the user.

Successful exploitation could lead to unauthorized disclosure of sensitive information from the database (high confidentiality impact). The vulnerability does not affect data integrity but may cause limited availability impact. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access privileges and monitoring for suspicious activity related to SQL queries in FooEvents for WooCommerce. Avoid using affected versions in production environments if possible.