The vulnerability allows the insertion and retrieval of sensitive information within the MeetingHub plugin’s data payloads. Leveraging this flaw, an attacker could extract embedded confidential data that the plugin processes, thereby compromising confidentiality. The weakness is classified as CWE‑201 and carries a CVSS score of 6.5.

All installations of the Sovlix MeetingHub WordPress plugin up to and including version 1.23.9 are affected. The issue is present from the earliest releases of the plugin through the stated maximum affected version.

The EPSS score of less than 1 % indicates a low probability of exploitation at present, and the flaw is not listed in the CISA KEV catalog. The description does not specify the exact attack vector or authentication requirements; it can be inferred that exploitation would likely involve the plugin’s normal operational paths, but the specific conditions are not detailed in the advisory.