This vulnerability in Foxit eSign for WordPress (esigngenie plugin) versions up to 2.0.3 allows an attacker with high privileges to retrieve embedded sensitive system information that should be protected. The CVSS 3.1 score is 5.5 (medium), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. The issue is categorized as exposure of sensitive system information to an unauthorized control sphere.

Successful exploitation could lead to unauthorized disclosure of sensitive system information, potentially aiding further attacks or information leakage. The integrity and availability impacts are low or none, indicating the vulnerability primarily compromises confidentiality. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates. Restricting access to high privilege accounts and limiting exposure of the affected plugin may reduce risk until a fix is available.