The Thrive Automator WordPress plugin before version 11.2 contains an input handling flaw that fails to properly sanitize and escape an array key used in a SQL query. This weakness permits an authenticated user with editor-level permissions to inject SQL payloads through the 'additional' parameter, enabling a blind SQL injection attack. Such exploitation can compromise database confidentiality and integrity by allowing unauthorized read or modification of data.

The vulnerability affects users running the Thrive Automator plugin for WordPress on any installation where the plugin version is older than 11.2. Only the editor role or higher (contributors, authors, or administrators) with authenticated access can potentially exploit the flaw.

Because attack requires legitimate editor credentials, the risk is limited to sites where editors are granted access. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no known widespread exploitation. Nonetheless, the impact of a successful blind SQL injection is high, potentially giving attackers read or write privileges to the underlying database. Additional constraints, such as lack of exposure to the web and limited editor privileges, may reduce the likelihood of successful exploitation, but the severity warrants mitigation.