This vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons allows an attacker to expose sensitive system information without requiring authentication or user interaction. The affected versions include all versions up to 3.2.4. The CVSS v3.1 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality loss; integrity and availability are unaffected. No vendor advisory or patch information is provided, and no exploits are known in the wild.

An attacker can retrieve sensitive system information from the affected plugin, potentially aiding further attacks or reconnaissance. However, the vulnerability does not allow modification of data or disruption of service. The confidentiality impact is limited, and no integrity or availability impacts are present.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigation steps are provided in the available data.