The vulnerability in Leap13 Premium Addons for Elementor allows an attacker to retrieve embedded sensitive data, which could expose sensitive system information to an unauthorized control sphere. The flaw is classified as a CWE‑497: Improper Handling of Sensitive Information. The exposed data may include configuration details or other sensitive information that could be leveraged to compromise further security controls.

Leap13 Premium Addons for Elementor, versions from the earliest release up to and including 4.11.53, is affected. The vulnerability applies to all installations of this WordPress plugin that are at or below the specified version.

The CVSS score is 5.3, indicating moderate severity. The EPSS score is less than 1 %, suggesting a low probability of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. Because the seen issuable data is embedded within the plugin code, the likely attack vector is a local or authenticated user leveraging WordPress administrative access. An attacker with the ability to upload or configure the plugin could trigger the data retrieval mechanism.