The plugin contains an error that permits unauthorized parties to retrieve sensitive system information embedded within the plugin. The flaw allows an attacker to read data that should be restricted to authorized users. According to CWE‑497, the vulnerability stems from improper handling of sensitive data, leading to disclosure.

The vulnerability is present in the alekv Pixel Manager for WooCommerce WordPress plugin for all releases up to and including version 1.51.1. No later versions are listed as affected, so upgrades beyond 1.51.1 should resolve the issue.

Using the provided CVSS score of 5.3, the vulnerability is considered moderate. The EPSS score of less than 1% indicates a very low probability of exploitation, and the issue is not currently listed in the CISA KEV catalog. The attack likely requires remote access to the WordPress installation or exploitation of a publicly exposed endpoint within the plugin, allowing the attacker to read the embedded data.