This vulnerability, identified as CWE-532, involves the insertion of sensitive information into log files by the Product Feed PRO for WooCommerce plugin from AdTribes.io. The affected versions include all versions up to 13.3.1. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to confidentiality loss due to sensitive data exposure in logs, with no impact on integrity or availability. No patch or official remediation level has been disclosed as of the publication date.

The vulnerability allows sensitive information to be written into log files, potentially exposing confidential data to unauthorized parties who can access these logs. There is no impact on data integrity or system availability. Exploitation requires network access but no privileges or user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and restrict access to log files to prevent unauthorized disclosure of sensitive information. Monitor vendor communications for updates on patches or mitigations.