The BoldGrid Easy SEO – Simple and Effective SEO WordPress plugin versions up to and including 1.6.14 expose sensitive information due to improper handling of meta information (og:description). Specifically, the first 130 characters of a password-protected post are included in the meta tag, which can be accessed by unauthenticated users. This constitutes an information exposure vulnerability classified as CWE-200. The CVSS 3.1 base score is 5.3 (medium severity) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact.

An attacker without authentication can view partial content (up to 130 characters) of password-protected posts, potentially revealing sensitive information that the post author intended to restrict. There is no impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling the plugin or restricting access to meta tags via other means. Monitor official BoldGrid channels for updates. No vendor advisory or patch links are currently provided.