This vulnerability in the WordPress Tag Cloud Plugin – Tag Groups (up to version 2.0.3) allows exposure of sensitive information to unauthorized actors. The CVSS 3.1 score of 5.3 reflects a medium severity issue with a network attack vector, no required privileges, and no user interaction needed. The impact is limited to confidentiality loss without affecting integrity or availability. No known exploits are reported in the wild. No patch or official remediation guidance is currently provided.

An attacker can gain access to sensitive information without authentication or user interaction, potentially leading to information disclosure. There is no impact on data integrity or system availability. The vulnerability could be leveraged to gather information that might aid further attacks, but no direct exploitation details are provided.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting exposure of the affected plugin or disabling it if feasible. Monitor for updates from the vendor or security advisories for a patch or mitigation instructions.