CVE-2025-32257

WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability in 1clickmigration 1 Click WordPress Migration 1-click-migration allows Retrieve Embedded Sensitive Data.This issue affects 1 Click WordPress Migration: from n/a through <= 2.5.7.

Affected

1clickmigration · 1 Click WordPress Migration

CVSS v3.1 PATCHSTACK

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.82% chance of exploitation in the next 30 days, 56th percentile

Nuclei

medium

Published

2025-04-04

Updated

2026-04-28

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32257.yaml

References

• CVE Record
• NVD entry