The JetEngine WordPress plugin is vulnerable to SQL injection due to improper sanitization of meta_query values within the filtered_query parameter in the listing_load_more AJAX handler. This parameter is excluded from HMAC query signature checks to support front-end filtering, but this design flaw allows unauthenticated attackers to inject malicious SQL payloads. The vulnerability affects all versions up to and including 3.8.10.1 and enables time-based or boolean blind SQL injection attacks by appending crafted meta_query values to AJAX requests captured from public Listing Grid pages.

Successful exploitation can lead to unauthorized data exposure through time-based or boolean blind SQL injection attacks. The vulnerability allows attackers to extract information from the database without authentication. There is no indication of integrity or availability impact. The CVSS score of 7.5 reflects a high severity due to network attack vector, no privileges required, and high confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to affected AJAX endpoints if possible and monitor for suspicious requests involving the filtered_query parameter. Avoid using vulnerable versions of JetEngine plugin (up to and including 3.8.10.1) in production environments.