This vulnerability affects the Advanced WooCommerce Product Sales Reporting plugin by WPFactory, allowing an attacker to retrieve sensitive information embedded in data sent by the plugin. It is exploitable remotely without authentication or user interaction. The issue exists in versions up to and including 4.1.2. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality only. No patch or vendor advisory details are available at this time.

An attacker can remotely retrieve sensitive information embedded in the data sent by the affected plugin, potentially exposing confidential data. There is no impact on data integrity or availability. The vulnerability does not require authentication or user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting exposure of the affected plugin or monitoring for unusual data disclosures related to the plugin. Avoid relying on this plugin in sensitive environments until patched.