This vulnerability in 10up Eight Day Week Print Workflow (<= 1.2.5) allows exposure of sensitive system information to unauthorized users. Specifically, it permits retrieval of embedded sensitive data by an unauthorized control sphere, potentially leaking confidential information. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges but no user interaction, and impacts confidentiality only. No official patch or vendor advisory is currently provided.

An attacker with low privileges can remotely access sensitive system information embedded within the affected plugin, potentially leading to information disclosure. There is no impact on integrity or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit access to the affected plugin and monitor for unusual access patterns. Avoid exposing the plugin to untrusted networks if possible.