An SQL Injection vulnerability exists in the WP w3all phpBB integration component of axew3.com, affecting versions up to 3.1.9. This flaw allows improper neutralization of special elements in SQL commands, potentially enabling an attacker with low privileges to execute unauthorized database queries. The vulnerability has a high severity score of 8.5 but no known exploits in the wild have been reported as of the publication date.