The vulnerability identified as CVE-2025-32257 affects the 1 Click WordPress Migration plugin for WordPress, specifically versions up to and including 2.5.7. It arises from the presence of uncleared debug information within the plugin, which can be accessed by an attacker without authentication. This exposure allows retrieval of embedded sensitive system data, potentially aiding further reconnaissance or attack efforts. The CVSS vector indicates the vulnerability is remotely exploitable over the network without privileges or user interaction, with a confidentiality impact classified as low and no impact on integrity or availability.

An attacker can remotely access sensitive system information embedded in debug data exposed by the plugin. While the confidentiality impact is low, this information disclosure could assist attackers in understanding system configurations or identifying further vulnerabilities. There is no impact on system integrity or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider disabling or limiting access to the plugin to reduce exposure.