The vulnerability identified as CVE-2025-53232 affects the WP Gmail SMTP plugin by inkthemes, specifically versions up to and including 1.0.7. It involves the insertion of sensitive information into data sent by the plugin, allowing retrieval of embedded sensitive data. The CVSS 3.1 base score is 5.8 (medium severity), with an attack vector over the network, low attack complexity, no privileges required, no user interaction, and a scope change. Confidentiality impact is low, with no impact on integrity or availability. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability may lead to unauthorized disclosure of sensitive information embedded in emails sent using the affected WP Gmail SMTP plugin. The confidentiality impact is rated low, meaning some sensitive data could be exposed but without affecting data integrity or availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure by restricting plugin usage or monitoring for updates from inkthemes. No official patch or workaround information is currently available.