This vulnerability in TeconceTheme Crete Core (<= 1.4.3) arises from improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. An attacker can exploit this remotely without authentication or user interaction, potentially leading to high confidentiality impact by extracting sensitive data. The vulnerability is rated critical with a CVSS 3.1 score of 9.3. No known exploits in the wild or vendor patch information are currently available.

The vulnerability allows remote attackers to perform Blind SQL Injection attacks without authentication or user interaction. This can lead to unauthorized disclosure of sensitive information (high confidentiality impact) and limited availability impact. Integrity impact is not indicated. The critical CVSS score reflects the severity of potential data exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider applying any recommended temporary mitigations from the vendor if published.