NerdPress Social Pug Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive system information to an unauthorized control sphere has been identified in the NerdPress Social Pug WordPress plugin, affecting versions through 1.35.1. This issue allows embedded sensitive data to be retrieved, potentially leading to the exploitation of other weaknesses within the system.

Impact

Exploitation of this vulnerability could allow a malicious actor to access sensitive information that is typically restricted from regular users, creating opportunities to exploit other vulnerabilities within the system.