This vulnerability in alekv Pixel Manager for WooCommerce allows an attacker to expose sensitive system information without authentication or user interaction. It affects versions up to and including 1.51.1. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and confidentiality impact only. No integrity or availability impacts are noted. No patch or vendor advisory is currently available.

An attacker can retrieve sensitive system information from affected installations, potentially aiding further attacks or reconnaissance. The confidentiality of some system data is compromised, but there is no direct impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should monitor official vendor channels for updates. No specific mitigations are provided in the available data.