This vulnerability in WPVibes Elementor Addon Elements (<= 1.14.4) allows an attacker with network access and low privileges to insert sensitive information into data sent by the plugin, leading to unauthorized retrieval of embedded sensitive data. The CVSS 3.1 base score is 6.5 (medium), with attack vector network, low attack complexity, privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. The vulnerability is publicly disclosed but lacks vendor patch or advisory details at this time.

The vulnerability can lead to unauthorized disclosure of sensitive information embedded in data sent by the affected plugin, compromising confidentiality. There is no reported impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit exposure by restricting network access and privileges where possible. Monitor for updates from WPVibes regarding patches or mitigations.