The vulnerability arises from the plugin's handling of sensitive data, allowing an attacker to retrieve embedded information that should not be exposed. The primary impact is sensitive data exposure, which can compromise the confidentiality of user information and site operations.

All WordPress sites running the Active Products Tables for WooCommerce plugin version 2.1.3 or earlier, distributed by PluginUs.Net, are affected.

The CVSS score of 5.3 indicates moderate risk. The EPSS score is not available, so current exploitation likelihood cannot be quantified, and the issue is not listed in the CISA KEV catalog. Based on the description, the attack vector is likely through the web interface, where a normal visitor can trigger the plugin to expose sensitive data without needing elevated privileges.