This vulnerability (CVE-2024-34754) in the A WP Life Contact Form Widget involves an exposure of sensitive information (CWE-200) to unauthorized actors. It affects versions up to 1.3.9 and can be exploited remotely without authentication or user interaction. The CVSS 3.1 base score is 5.3, reflecting a medium impact on confidentiality with no impact on integrity or availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability allows unauthorized disclosure of sensitive information, potentially leading to privacy breaches or information leakage. There is no impact on data integrity or system availability. Since no exploits are known in the wild, the immediate risk appears limited but should be monitored.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting exposure of the affected widget or applying compensating controls such as restricting access to the widget or monitoring for unusual access patterns.