This vulnerability in TeconceTheme Coven Core arises from improper neutralization of special elements used in SQL commands, enabling Blind SQL Injection attacks. It affects all versions up to 1.3. The vulnerability allows an unauthenticated attacker to remotely exploit the system over the network without user interaction. The CVSS 3.1 vector indicates critical impact on confidentiality and some impact on availability, with no integrity impact. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an attacker to extract sensitive information from the database (confidentiality impact) and cause partial denial of service (availability impact). Integrity is not impacted according to the CVSS vector. The vulnerability is exploitable remotely without authentication or user interaction, increasing its risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any available workarounds from the vendor or restrict network access to the affected application to trusted users only. Monitor vendor channels for updates on patches or mitigations.