This vulnerability in TeconceTheme Coven Core (<= 1.3) arises from improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. The CVSS 3.1 score of 9.3 reflects a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The vulnerability impacts confidentiality (high) and availability (low). No vendor advisory or patch information is available, and the product is not a cloud service, so remediation must be managed by the user.

Successful exploitation could allow an unauthenticated remote attacker to perform Blind SQL Injection, potentially leading to unauthorized disclosure of sensitive information (confidentiality impact is high) and limited denial of service (availability impact is low). Integrity impact is not affected. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is provided, users should monitor vendor communications for updates. In the meantime, restricting network access to the affected application and applying web application firewall rules to detect and block SQL injection attempts may reduce risk.