The vulnerability identified as CVE-2026-32584 affects the Smart One Click Setup – Complete Demo Import & Export plugin by Chiranjit Hazarika. It involves the insertion of sensitive information into data sent by the plugin, allowing retrieval of embedded sensitive data. This issue impacts versions from the initial release through 1.4.3. The CVSS 3.1 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No official patch or remediation guidance is currently provided.

An attacker could retrieve sensitive information embedded in the data sent by the affected plugin versions, potentially leading to information disclosure. The impact is limited to confidentiality with no integrity or availability effects reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the plugin's functionality and monitoring for any unusual data transmissions involving the plugin.