This vulnerability in Designinvento DirectoryPress (<= 3.6.26) permits unauthorized retrieval of embedded sensitive system information, potentially exposing confidential data. The exact nature of the sensitive information and the method of exposure are not detailed. No CVSS score or vendor advisory is available to clarify severity or remediation status. The vulnerability is publicly disclosed but lacks further technical or exploit details.

Exposure of sensitive system information to unauthorized actors can lead to increased risk of further attacks or data leakage. However, without detailed information on the type of data exposed or exploitation methods, the precise impact cannot be fully assessed. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected DirectoryPress installation to trusted users only.