This vulnerability in TeconceTheme Crete Core arises from improper neutralization of special elements used in SQL commands, enabling Blind SQL Injection attacks. The affected versions include all releases up to 1.4.3. The CVSS score of 9.3 indicates a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact affects confidentiality (high) and availability (low), with no integrity impact reported. There is no vendor advisory or patch information available to confirm remediation status.

An attacker can exploit this vulnerability remotely without authentication or user interaction to perform Blind SQL Injection attacks. This can lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity is not impacted according to the CVSS vector. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying any available workarounds or mitigations recommended by the vendor. Avoid exposing vulnerable versions to untrusted networks if possible.