This vulnerability involves improper neutralization of special elements in SQL commands within the bdthemes Element Pack Elementor Addons plugin, leading to Blind SQL Injection. It affects all versions up to 8.4.2. Blind SQL Injection allows attackers to infer database information by sending crafted queries and observing application behavior, even without direct query output. No CVSS score or vendor remediation details are provided, and no known active exploitation has been reported.

Successful exploitation could allow an attacker to execute unauthorized SQL queries on the affected system's database, potentially leading to data disclosure, modification, or other impacts depending on the database and application context. Since this is a Blind SQL Injection, the attacker may extract information indirectly. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.