The vulnerability identified as CVE-2025-49914 affects the jetmonsters Restaurant Menu by MotoPress plugin, versions up to and including 2.4.7. It allows an attacker with low privileges to remotely access sensitive system information embedded within the application, leading to an exposure of confidential data. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and high confidentiality impact. There is no indication of integrity or availability impact. No known exploits are reported in the wild, and no official patch or remediation guidance is currently provided.

The vulnerability exposes sensitive system information to unauthorized users with limited privileges, potentially aiding further attacks or reconnaissance. The confidentiality of the system is compromised, but there is no direct impact on system integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual access patterns. Avoid granting unnecessary privileges to users. Follow updates from the vendor or trusted security advisories for patch availability.