The vulnerability identified as CVE-2026-25344 affects RadiusTheme's Review Schema plugin versions up to 2.2.6. It allows an attacker with limited privileges to retrieve embedded sensitive system information without user interaction. The vulnerability is categorized as an exposure of sensitive system information to an unauthorized control sphere. The CVSS v3.1 base score is 6.5, with network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No patch or vendor advisory is currently available.

Successful exploitation of this vulnerability could lead to unauthorized disclosure of sensitive system information, potentially aiding further attacks or reconnaissance. The confidentiality impact is high, but integrity and availability are not affected. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit access to the affected plugin and monitor for unusual access patterns. Avoid exposing the plugin to untrusted users. Follow vendor communications for updates on patches or mitigations.