This vulnerability involves improper neutralization of special elements in SQL commands within the Meow Gallery plugin, enabling Blind SQL Injection attacks. The affected versions include all releases up to 5.4.4. The CVSS v3.1 base score is 7.6, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No vendor advisory or patch information is currently available.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the database (high confidentiality impact). Integrity is not impacted, but availability impact is low. The attack requires high privileges and can be performed remotely without user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users with high privileges and monitor for unusual database activity related to SQL injection attempts. Avoid exposing the vulnerable versions in untrusted environments.