This vulnerability involves improper neutralization of special elements in SQL commands within the Shahjada Download Manager Addons for Elementor plugin, enabling blind SQL injection attacks. The affected versions include all versions up to and including 1.3.0. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with a high impact on confidentiality and a low impact on availability. No patch or official remediation guidance is currently provided.

An attacker can exploit this vulnerability to perform blind SQL injection, potentially extracting sensitive information from the database (high confidentiality impact). The integrity impact is not indicated, and availability impact is low. This could lead to unauthorized data disclosure but does not explicitly indicate data modification or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider restricting access to the vulnerable plugin or disabling it if possible to mitigate risk.