This vulnerability in RealMag777 Active Products Tables for WooCommerce (<= 1.0.8) involves improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. The CVSS 3.1 score of 9.3 reflects a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact includes high confidentiality loss and low availability impact, with no integrity impact. No official patch or remediation guidance is currently available.

An attacker can exploit this vulnerability remotely without authentication to perform Blind SQL Injection attacks, potentially extracting sensitive information from the database. The confidentiality impact is high, meaning sensitive data could be disclosed. The availability impact is low, indicating limited disruption to service. Integrity is not impacted according to the CVSS vector. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting access to the affected plugin to reduce exposure. Monitor vendor channels and security advisories for updates and apply patches promptly once available.