CVE-2026-32584CWE-201

CVE-2026-32584

Medium · published October 2, 2026

CVSS v3.1

5.3

EPSS

Percentile

9.0

In the wild

Unconfirmed

What it is

Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – Complete Demo Import & Export: from n/a through 1.4.3.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00197 · 9.0th percentile
Weakness: CWE-201 · Insertion of Sensitive Information Into Sent Data
Published: 2026-10-02T19:17Z

References (1)

https://patchstack.com/database/wordpress/plugin/smart-one-click-setup/vulnerability/wordpress-smart-one-click-setup-complete-demo-import-amp-export-plugin-1-4-3-sensitive-data-exposure-vulnerability?_s_id=cve · [email protected]

EPSS history

Timeline

04 OCT 03:28Z
EPSS moved — → 0%
epss
02 OCT 14:41Z
WordPress Smart One Click Setup – Complete Demo Import & Export plugin <= 1.4.3 - Sensitive Data Exposure vulnerability
cvelistv5