The SEO SIMPLE PACK plugin for WordPress versions up to and including 3.2.1 contains an information exposure vulnerability (CWE-200) where unauthenticated attackers can retrieve limited sensitive information about password protected posts through the META description tag. This exposure arises because the plugin improperly handles META description content, allowing unauthorized access to data that should be restricted. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No patch or remediation has been confirmed as available.

An attacker without authentication can gain limited sensitive information about password protected posts, potentially aiding further reconnaissance or targeted attacks. The vulnerability does not impact integrity or availability, only confidentiality to a limited extent. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to the META description content or disabling the SEO SIMPLE PACK plugin if exposure risk is unacceptable. Monitor vendor channels for updates or official patches.