CVE-2025-32257

MEDIUM5.3

Public PoC

Description

Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability in 1clickmigration 1 Click WordPress Migration 1-click-migration allows Retrieve Embedded Sensitive Data.This issue affects 1 Click WordPress Migration: from n/a through <= 2.5.7.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected products

1clickmigration / 1 Click WordPress Migration0 – 2.5.7

Exploits & PoCs

nuclei1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoureby pussycat0x

References

MISChttps://patchstack.com/database/Wordpress/Plugin/1-click-migration/vulnerability/wordpress-1-click-wordpress-migration-plugin-2-1-sensitive-data-exposure-vulnerability?_s_id=cve