The vulnerability CVE-2025-69310 affects TeconceTheme Woodly Core versions up to and including 1.4. It is caused by improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. This allows an unauthenticated remote attacker to extract sensitive information from the database, impacting confidentiality severely, while integrity is not affected and availability impact is low. The CVSS vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and scope changed due to the vulnerability.

An attacker can exploit this vulnerability remotely without authentication to perform Blind SQL Injection, potentially exposing sensitive data from the backend database. The confidentiality impact is high, while integrity is not impacted and availability impact is low. This could lead to unauthorized data disclosure but does not directly allow data modification or destruction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a patch is available, consider restricting access to affected components and monitoring for unusual database activity related to SQL injection attempts.