vulnerability
WordPress Plugin: site-checkup: CVE-2025-11627: Improper Output Neutralization for Logs
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:N/I:P/A:P) | Oct 29, 2025 | Oct 30, 2025 | Oct 31, 2025 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:P)
Published
Oct 29, 2025
Added
Oct 30, 2025
Modified
Oct 31, 2025
Description
The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content into log files, and potentially cause denial of service via disk space exhaustion.
Solution
site-checkup-plugin-cve-2025-11627
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.