The vulnerability allows unauthenticated readers to retrieve data from tables created by the WPManageNinja Ninja Tables plugin on a WordPress site. The plugin fails to enforce proper access restrictions, so any web user can access table contents via the plugin’s public endpoints. Because the data stored in the tables may contain personal or proprietary information, exposure can lead to confidentiality breaches. The flaw is categorized as CWE‑497, indicating an inability to properly secure confidential information.

The WPManageNinja Ninja Tables plugin for WordPress is affected. Versions up to and including 5.2.10 are vulnerable; the issue is resolved in version 5.2.11 and later. No other products or versions are listed as impacted.

The CVSS score of 5.3 signifies moderate severity, and the EPSS score of less than 1 % indicates a very low but non‑zero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting that widespread exploitation has not yet occurred. The likely attack vector involves unauthenticated HTTP requests to the plugin’s table retrieval endpoints, requiring no elevated privileges.