This vulnerability in wowpress.host's Fix Media Library plugin (versions up to 2.0) involves the insertion of sensitive information into data sent by the plugin, which can lead to unauthorized retrieval of embedded sensitive data. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no required privileges or user interaction. No known exploits are reported in the wild. No patch or official remediation information is currently available.

An attacker can retrieve sensitive information embedded in data sent by the Fix Media Library plugin, potentially leading to information disclosure. The impact is limited to confidentiality loss without integrity or availability effects. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting exposure of the affected plugin or applying temporary controls such as restricting access to the affected functionality if possible.