CVE-2024-31249 is classified as CWE-532, which involves the insertion of sensitive information into log files within the WPKube Subscribe To Comments Reloaded plugin. The vulnerability affects versions up to 220725. The CVSS 3.1 base score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No integrity or availability impacts are noted. There is no vendor-provided patch or official remediation guidance at this time, and the vulnerability is not related to a cloud service.

The vulnerability may lead to sensitive information being recorded in log files, which could be accessed by unauthorized users if log files are not properly protected. The impact is limited to confidentiality with no direct impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and restrict access to log files to prevent unauthorized disclosure of sensitive information. Monitor vendor channels for updates regarding patches or official mitigations.