The vulnerability CVE-2025-69304 affects TeconceTheme Allmart versions up to and including 1.1. It is caused by improper neutralization of special elements used in SQL commands, enabling Blind SQL Injection attacks. This allows remote attackers with no privileges or user interaction to extract sensitive data (confidentiality impact is high) and cause partial denial of service (availability impact is low). The vulnerability is remotely exploitable over the network without authentication and requires low attack complexity. The scope is changed, meaning the vulnerability affects components beyond the initially vulnerable code. No vendor advisory or patch links are currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the database and partial disruption of service. The confidentiality impact is high, integrity impact is none, and availability impact is low. The vulnerability can be exploited remotely without authentication or user interaction, making it a critical security risk for affected installations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying any available workarounds or mitigations recommended by the vendor. Monitoring for updates from TeconceTheme is strongly advised. No official patch or temporary fix information is currently available.