This vulnerability in Aman Ninja Forms Views plugin allows an attacker with low privileges to perform blind SQL injection via improper neutralization of special elements in SQL commands. The affected versions are from initial release through 3.3.2. The CVSS 3.1 base score is 8.5, indicating high severity with network attack vector, low attack complexity, and no user interaction required. The impact includes high confidentiality loss and low availability impact, with no integrity impact. No vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker to extract sensitive data from the backend database (confidentiality impact) and cause partial denial of service (availability impact). Integrity of data is not affected. The vulnerability requires low privileges but no user interaction, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected plugin functionality and monitoring for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable plugin to untrusted users.