This vulnerability affects WP Chill RSVP and Event Management plugin versions up to 2.7.16. It allows unauthorized retrieval of embedded sensitive system information, potentially exposing data that should be protected. The vulnerability is categorized as an exposure of sensitive system information to an unauthorized control sphere. No CVSS score or vendor remediation information is currently available.

The impact involves unauthorized disclosure of sensitive system information, which could aid attackers in further attacks or reconnaissance. However, without additional details on the nature of the sensitive information or exploitation methods, the full impact scope is unclear. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor WP Chill's advisories for updates. Until a patch is available, consider restricting access to the affected plugin's functionality to trusted users only.