This vulnerability (CVE-2026-52694) affects the WP E-Signature Signature Add-On for WooCommerce, specifically versions up to 2.0. It allows unauthenticated attackers to access sensitive system information, classified under CWE-497. The CVSS 3.1 base score is 7.5, indicating a high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is confidentiality loss without affecting integrity or availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

An unauthenticated attacker can gain access to sensitive information from the affected plugin, potentially leading to information disclosure that could aid further attacks. The confidentiality impact is high, but integrity and availability are not affected. This exposure could compromise system or user data confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual activity. Avoid exposing the plugin to untrusted networks or users. Follow vendor updates closely for any forthcoming patches or mitigations.