The Learts Addons plugin for WordPress contains a critical SQL injection vulnerability that could allow an unauthenticated attacker to compromise the underlying database.

This is a SQL injection vulnerability resulting from improper neutralization of special elements in SQL commands within the plugin. The flaw allows an unauthenticated attacker to manipulate database queries, potentially leading to unauthorized data access or modification.

Successful exploitation of this vulnerability poses a severe risk to data confidentiality and integrity. With a CVSS score of 9.3, this flaw enables attackers to extract sensitive information from the database or bypass authentication mechanisms, resulting in significant potential for system compromise and reputational damage.

Immediate Action: Identify and update the ThemeMove Learts Addons plugin to the latest available version provided by the vendor.

Proactive Monitoring: Review database query logs for anomalous syntax or unexpected patterns that may indicate automated injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection attack strings.

Public Exploit Available: Not specified

Given the critical CVSS severity of 9.3, administrators should treat this vulnerability as a priority. Immediately verify the installation of the Learts Addons plugin and apply the latest security updates to neutralize the risk of unauthorized database access.