This vulnerability in the BoomDevs WordPress Coming Soon plugin allows an attacker with low privileges to access sensitive system information that should not be exposed. The issue affects versions up to and including 1.0.4. The CVSS 3.1 base score is 4.3, indicating a medium severity level, with an attack vector over the network, low attack complexity, no user interaction required, and limited impact confined to confidentiality. There is no indication of known exploits in the wild or vendor-provided patches at this time.

An attacker with limited privileges can retrieve sensitive system information, potentially aiding further attacks or reconnaissance. The impact is limited to confidentiality with no direct effect on system integrity or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin and monitor for suspicious activity related to information disclosure. Avoid granting unnecessary privileges to users to reduce risk.