This vulnerability involves improper neutralization of special elements in SQL commands within the RealMag777 FOX woocommerce-currency-switcher plugin, enabling Blind SQL Injection attacks. It affects FOX versions up to 1.4.5. The CVSS 3.1 base score is 7.6, indicating high severity, with network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges to perform Blind SQL Injection, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact). Integrity is not impacted, and availability impact is low. The vulnerability affects the confidentiality of the database contents accessed by the plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to high-privilege accounts that can interact with the vulnerable component and monitor for unusual database queries related to the plugin. Avoid exposing the vulnerable plugin to untrusted networks or users with high privileges.