The vulnerability identified as CVE-2025-24651 affects the WebToffee WordPress Backup & Migration plugin up to version 1.5.3. It involves the insertion of sensitive information into log files, which may be accessed by unauthorized parties, potentially exposing confidential data. The issue is categorized as an information disclosure risk via log file content. No official patch or remediation details are currently available.

Sensitive information may be exposed through log files generated by the vulnerable plugin, potentially leading to unauthorized data disclosure. There is no evidence of known exploits in the wild. The impact is limited to confidentiality concerns related to log file contents.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to log files and monitoring for any unauthorized access to these files. Avoid exposing log files publicly or to untrusted users.