The Slider Revolution plugin for WordPress contains a sensitive information exposure vulnerability (CWE-200) in versions up to 7.0.9. The issue arises from the 'get_stream_data()' function, which can be invoked by unauthenticated attackers to retrieve sensitive content such as password-protected posts, pages, and products. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No official patch or remediation guidance is currently available from the vendor or advisory sources.

An unauthenticated attacker can extract sensitive information that should be protected, including content from password-protected posts, pages, and products. This exposure could lead to unauthorized disclosure of confidential data. There is no indication of impact on integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin or disabling it if sensitive content exposure is a concern. Monitor official Revolution Slider communications for updates on patches or mitigations.