This vulnerability in Leap13 Premium Addons for Elementor allows an attacker to retrieve sensitive system information without authentication or user interaction. It affects versions up to and including 4.11.53. The CVSS score of 5.3 reflects a medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality as integrity and availability are not affected. No patch or vendor advisory is currently provided.

An attacker can gain access to sensitive system information embedded within the affected plugin, potentially aiding further attacks or reconnaissance. The vulnerability does not impact system integrity or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is released, restrict network access to the affected plugin where possible and monitor for unusual access patterns related to the plugin. Avoid exposing the plugin to untrusted networks.