This vulnerability in JetElements For Elementor allows an attacker with low privileges to cause sensitive information to be inserted into data sent by the plugin, leading to unauthorized retrieval of embedded sensitive data. The issue affects versions up to and including 2.7.7. The CVSS 3.1 vector indicates network attack vector, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability.

The vulnerability compromises the confidentiality of sensitive information embedded in the data sent by the affected plugin. There is no indication of impact on data integrity or system availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Crocoblock advisories for updates and apply any official fixes once released.