CVE-2024-7382 is a vulnerability in the coffee2code Linkify Text WordPress plugin that causes full path disclosure due to test files left with display_errors enabled. This allows unauthenticated attackers to retrieve the full path of the web application. The vulnerability affects all versions up to 1.9.1. The disclosed information is limited in usefulness unless chained with other vulnerabilities. There is no evidence of active exploitation in the wild. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact.

The vulnerability exposes the full file system path of the web application to unauthenticated attackers. This information disclosure can aid attackers in crafting further attacks but does not directly compromise confidentiality, integrity, or availability. No direct damage occurs from this vulnerability alone, and no known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the Linkify Text plugin if full path disclosure poses a risk in their environment. Monitoring vendor communications for updates is recommended.