This vulnerability in UserElements' Ultimate Member Widgets for Elementor plugin (<= 2.3) allows an attacker to insert sensitive information into data sent by the plugin, leading to unauthorized retrieval of embedded sensitive data. The CVSS 3.1 score of 7.5 indicates a high-severity issue with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality but not integrity or availability. No known exploits in the wild have been reported, and no patch or remediation details are currently provided.

Successful exploitation could lead to unauthorized disclosure of sensitive information embedded in data sent by the plugin. This compromises confidentiality but does not affect integrity or availability of the system. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to affected plugin functionalities or monitoring for unusual data transmissions related to the plugin.