This vulnerability affects the ThemeSphere SmartMag WordPress theme versions before 10.1.0. It allows sensitive information to be inserted into log files, potentially exposing confidential data to unauthorized parties. The CVSS score is 5.3 (medium severity) with an attack vector of network, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality but not integrity or availability. No patch or vendor advisory details are currently available to confirm remediation status.

The vulnerability could lead to unauthorized disclosure of sensitive information through log files. This may allow attackers or unauthorized users who can access the logs to obtain confidential data. There is no indication of impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for updates from ThemeSphere regarding SmartMag theme updates. Avoid exposing log files to unauthorized access as a precautionary measure.