This vulnerability (CVE-2026-28169) affects YITH WooCommerce Zoom Magnifier versions up to 2.52.0 and is classified as CWE-497, indicating exposure of sensitive system information to an unauthorized control sphere. The vulnerability allows unauthenticated attackers to access sensitive data, which could aid in further attacks or reconnaissance. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact. No vendor advisory or patch information is currently available.

An unauthenticated attacker can gain access to sensitive system information from affected versions of the YITH WooCommerce Zoom Magnifier plugin. This exposure could facilitate further attacks or information gathering but does not directly impact integrity or availability. The confidentiality impact is limited but non-negligible.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected plugin or monitoring for unusual access patterns related to the plugin. Avoid exposing the plugin to untrusted networks if possible.