This vulnerability in the Broken Link Checker plugin for WordPress arises from improper neutralization of special elements used in SQL commands, enabling Blind SQL Injection attacks. The affected versions include all versions up to 2.4.7. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. The vulnerability is publicly disclosed but lacks an official fix or patch as of the publication date.

Successful exploitation could allow an attacker with high privileges to perform Blind SQL Injection, potentially leading to unauthorized disclosure of sensitive information from the database. The vulnerability impacts confidentiality severely but does not affect integrity and only minimally affects availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to high-privilege accounts and monitor for unusual activity related to the Broken Link Checker plugin. Avoid exposing administrative interfaces to untrusted networks. Follow vendor communications closely for updates on patches or mitigations.