The vulnerability CVE-2025-69351 in Shahjahan Jewel's Ninja Tables plugin allows an attacker with at least low privileges to perform Blind SQL Injection due to improper sanitization of SQL commands. This can result in unauthorized access to sensitive information and limited denial of service. The issue affects all versions up to 5.2.4. The CVSS v3.1 base score is 8.5, indicating high severity, with network attack vector, low attack complexity, privileges required, no user interaction, and a scope change. No official patch or vendor advisory with remediation details is currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive data (high confidentiality impact) and partial denial of service (low availability impact). Integrity is not impacted according to the CVSS vector. The vulnerability requires an attacker with low privileges and no user interaction, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider restricting access to the affected plugin and monitor for suspicious activity. Avoid exposing the vulnerable component to untrusted users. Follow vendor updates closely for official fixes.