The vulnerability is a classic SQL injection found in WordPress Plugin PICA Photo Gallery 1.0. Attackers can send crafted GET requests to the aid parameter, which is not properly sanitized, causing arbitrary SQL statements to be executed against the database. Successful exploitation lets the adversary read any table, including user credentials, thereby compromising confidentiality and enabling further lateral movement or data theft.

The affected component is the WordPress plugin PICA Photo Gallery developed by Apptha, specifically version 1.0. Site owners who have installed this exact release on any WordPress installation are susceptible to the vulnerability.

The CVSS score of 8.8 assigns high severity to the flaw. Because authentication is not required, the exploit is straightforward: a remote attacker simply crafts a URL with a malicious aid value. No special setup is needed beyond being able to reach the site. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog, but the high CVSS coupled with the trivial remote execution path keeps the risk significant. Since the injected SQL can read sensitive data, the potential damage to confidentiality is high.