This vulnerability involves improper neutralization of special elements in SQL commands within the Element Invader ElementInvader Addons for Elementor plugin, enabling blind SQL injection attacks. It affects all versions up to 1.4.2. The CVSS 3.1 base score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No official patch or vendor advisory is provided in the available data.

Successful exploitation could allow an attacker to extract sensitive information from the database due to blind SQL injection. The confidentiality impact is high, but integrity impact is not indicated, and availability impact is low. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, consider restricting access to the vulnerable plugin functionality to trusted users only and monitor for unusual database activity related to the plugin.