This vulnerability in the AWP Classifieds plugin (<= 4.4.3) allows an attacker without privileges or user interaction to retrieve sensitive system information embedded within the plugin. The exposure is limited to confidentiality impact, with no integrity or availability consequences. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector and low attack complexity. The vulnerability is publicly disclosed but lacks an official patch or vendor advisory at this time.

An attacker can access sensitive system information without authentication, potentially aiding further attacks or reconnaissance. However, the vulnerability does not allow modification or disruption of the system, limiting impact to confidentiality only. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected plugin or monitoring for unusual access patterns related to the plugin endpoints. Avoid exposing the plugin to untrusted networks if possible.