This vulnerability in WPPizza (<= 3.19.9) allows unauthorized access to sensitive subscriber data, categorized as CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high confidentiality impact with no impact on integrity or availability. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

The vulnerability exposes sensitive subscriber information to unauthorized actors, potentially leading to privacy breaches or data leakage. The confidentiality impact is high, but the integrity and availability of the system are not affected. Exploitation requires low privileges and can be performed remotely over the network without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit access privileges where possible and monitor for unusual access patterns related to subscriber data. Avoid exposing sensitive subscriber information unnecessarily.