This vulnerability (CVE-2024-35691) affects Marketing Fire, LLC's Widget Options - Extended plugin versions up to 5.1.0. It involves the exposure of sensitive information to unauthorized actors, categorized as CWE-200. The CVSS 3.1 score of 6.5 indicates a medium severity with network attack vector, low attack complexity, and no user interaction required. The impact is limited to confidentiality, with no integrity or availability effects reported. No official remediation or patch has been published by the vendor, and the product is not a cloud service, so remediation depends on vendor or user action.

The vulnerability allows unauthorized actors to access sensitive information, potentially leading to confidentiality breaches. There is no reported impact on integrity or availability. No known exploits are currently active in the wild, which may reduce immediate risk but does not eliminate the potential for future exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, restricting network access to the affected plugin and limiting privileges where possible may reduce exposure.