This vulnerability in RebelCode Spotlight Social Media Feeds (up to version 1.7.1) permits an attacker to retrieve embedded sensitive system information without authorization. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The issue affects confidentiality only, with no impact on integrity or availability. There is no indication of known exploits in the wild or vendor-provided patches at this time.

An attacker can access sensitive system information embedded within the Spotlight Social Media Feeds plugin without authorization, potentially exposing confidential data. The impact is limited to confidentiality loss; there is no reported impact on system integrity or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual activity related to data exposure. Avoid exposing the plugin to untrusted networks if possible.