This vulnerability involves improper neutralization of special elements in SQL commands within the WP EasyCart plugin, enabling blind SQL injection attacks. An attacker with low privileges and no user interaction can exploit this remotely over the network. The vulnerability affects all versions up to 5.8.13. The CVSS score is 8.5, indicating a high severity with network attack vector, low attack complexity, and significant confidentiality impact.

Successful exploitation could allow an attacker to extract sensitive information from the database (high confidentiality impact) without affecting integrity but causing low availability impact. The attacker requires low privileges and no user interaction, increasing the risk. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the affected plugin and monitor for suspicious activity related to SQL injection attempts.