This vulnerability (CVE-2024-5059) in the A WP Life Event Management Tickets Booking plugin allows unauthorized disclosure of sensitive information. It affects versions up to 1.4.0 and is categorized under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 3.1 base score is 5.3, indicating a medium severity issue exploitable remotely without authentication or user interaction. No patch or official remediation guidance has been published by the vendor or maintainers as of the published date.

An attacker can remotely access sensitive information without authentication or user interaction, potentially leading to information disclosure that could aid further attacks or privacy violations. There is no indication of impact on integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor for updates from the vendor and consider restricting access to the affected plugin or sensitive data until a fix is released.