The vulnerability identified as CVE-2026-32354 affects the magepeopleteam WpEvently plugin for WordPress, specifically versions prior to 5.1.9. It involves the insertion of sensitive information into data sent by the plugin, which could allow an attacker to retrieve embedded sensitive data. The CVSS 3.1 base score is 5.3, indicating a medium severity issue with a network attack vector, low complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality (partial data disclosure) without integrity or availability effects. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability may lead to unauthorized disclosure of sensitive information embedded in data sent by the WpEvently plugin. There is no indication of impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from magepeopleteam and consider limiting exposure of the affected plugin if possible.