This vulnerability affects the WPVibes Elementor Addon Elements plugin for WordPress, specifically versions up to and including 1.14.4. It allows an attacker with low privileges and network access to cause sensitive information to be inserted into data sent by the plugin, which can then be retrieved. The vulnerability impacts confidentiality but does not affect integrity or availability. The CVSS vector indicates no user interaction is required, and the scope is unchanged. No patch or vendor advisory details are currently provided.

The vulnerability can lead to unauthorized disclosure of sensitive information embedded in data sent by the affected plugin, potentially exposing confidential data. There is no reported impact on data integrity or system availability. Exploitation requires network access and low privileges, but no user interaction is needed. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting network exposure of the affected plugin and restricting user privileges as a precaution. Monitor vendor channels for updates regarding patches or official mitigations.