This vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons (<= 3.2.4) allows an attacker to retrieve sensitive system information without authentication or user interaction. The CVSS 3.1 base score is 5.3 (medium), reflecting a network attack vector with low complexity and no privileges required. The impact is limited to confidentiality loss, with no integrity or availability impact. No patch or vendor advisory is currently available, and no known exploits have been reported.

An attacker can remotely access sensitive system information embedded in the plugin without any privileges or user interaction. This exposure could aid further attacks but does not directly affect system integrity or availability. The confidentiality impact is limited but notable given the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected plugin or monitoring for unusual access patterns. Avoid exposing the plugin to untrusted networks if possible.