The vulnerability identified as CVE-2024-32796 affects Jack Arturo WP Fusion Lite plugin versions up to 3.42.10. It involves insertion of sensitive information into sent data, which may allow an attacker with low privileges to retrieve embedded sensitive data. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and no user interaction, but requires some privileges. The impact is limited to confidentiality with no integrity or availability impact. No known exploits are reported in the wild. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability could lead to unauthorized disclosure of sensitive information embedded in data sent by the WP Fusion Lite plugin. The confidentiality impact is low, and there is no impact on data integrity or system availability. Exploitation requires low privileges but no user interaction. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting access to the plugin and monitoring for unusual data transmissions. Avoid exposing the plugin to untrusted users with privileges that could exploit this issue.