CVE-2025-10486

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10486", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-15T14:12:29.662Z", "datePublished": "2025-10-15T08:26:01.576Z", "dateUpdated": "2026-04-08T17:18:24.553Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:24.553Z"}, "affected": [{"vendor": "steadycontent", "product": "Content Writer", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.6.8", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Content Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.8 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files."}], "title": "Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log File", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb20452b-7049-4567-8288-6d24350e2143?source=cve"}, {"url": "https://plugins.svn.wordpress.org/content-writer/tags/3.6.8/lib/sc_functions.php"}, {"url": "https://wordpress.org/plugins/content-writer/"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3379612%40content-writer&new=3379612%40content-writer&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-532 Insertion of Sensitive Information into Log File", "cweId": "CWE-532", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "D01EXPLOIT OFFICIAL"}], "timeline": [{"time": "2025-10-14T20:02:33.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-15T13:23:08.345402Z", "id": "CVE-2025-10486", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T14:54:06.014Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10486", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-15T13:23:08.345402Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T13:23:09.065Z"}}], "cna": {"title": "Content Writer <= 3.6.8 - Unauthenticated Information Exposure via Log File", "credits": [{"lang": "en", "type": "finder", "value": "D01EXPLOIT OFFICIAL"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "steadycontent", "product": "Content Writer", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.6.8"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-14T20:02:33.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb20452b-7049-4567-8288-6d24350e2143?source=cve"}, {"url": "https://plugins.svn.wordpress.org/content-writer/tags/3.6.8/lib/sc_functions.php"}, {"url": "https://wordpress.org/plugins/content-writer/"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3379612%40content-writer&new=3379612%40content-writer&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The Content Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.8 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:24.553Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10486", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:18:24.553Z", "dateReserved": "2025-09-15T14:12:29.662Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-15T08:26:01.576Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Content Writer", "vendor": "steadycontent", "versions": [{"lessThanOrEqual": "3.6.8", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Content Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.8 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files."}, {"lang": "es", "value": "El plugin Content Writer para WordPress es vulnerable a la Exposici\u00f3n de Informaci\u00f3n Sensible en todas las versiones hasta la 3.6.8, inclusive, a trav\u00e9s de archivos de registro expuestos p\u00fablicamente. Esto permite que atacantes no autenticados vean informaci\u00f3n potencialmente sensible contenida en los archivos de registro expuestos."}], "id": "CVE-2025-10486", "lastModified": "2026-10-08T12:10:00.217", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10486", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-15T13:23:08.345402Z", "version": "2.0.3"}}]}, "published": "2025-10-15T09:15:40.547", "references": [{"source": "security@wordfence.com", "url": "https://plugins.svn.wordpress.org/content-writer/tags/3.6.8/lib/sc_functions.php"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3379612%40content-writer&new=3379612%40content-writer&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/content-writer/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb20452b-7049-4567-8288-6d24350e2143?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T18:52:19.571360+00:00", "value": {"mitigation_remediation": ["Upgrade the Content Writer plugin to any release newer than 3.6.8, which removes the publicly exposed log file handler.", "Configure the web server or WordPress file permissions to deny HTTP access to the logs directory, ensuring that log files cannot be retrieved via a web request.", "If an upgrade cannot be performed immediately, delete existing world\u2011readable log files and configure the plugin or host environment to generate logs with restrictive ownership and permissions, or disable logging for this plugin if an option is available."], "summary": {"action": "Update Plugin", "impact": "Sensitive Information Exposure"}, "threat_synthesis": {"affected_systems": "Installations of the steadycontent Content Writer plugin for WordPress, versions 3.6.8 and earlier, deployed on any WordPress site are affected.\n", "description_and_impact": "The Content Writer plugin for WordPress permits unauthenticated viewing of log files that can contain sensitive data. The weakness originates from publicly exposed log files due to missing access controls, matching CWE\u2011532. This allows an attacker to retrieve potentially confidential information by accessing the log file URL.\n\nAffected systems are installations of the steadycontent Content Writer plugin for WordPress in any version up to and including 3.6.8, regardless of user permissions.\n\nThe CVSS score of 5.3 indicates moderate severity, and the EPSS score of less than 1% suggests low likelihood of exploitation. The vulnerability is not listed in CISA KEV. Attackers can reach the exposed log files directly via a web request, so administrators should remedy the issue promptly by updating the plugin, restricting log file access, or removing the logs.\n", "risk_and_exploitability": "The vulnerability carries a medium severity CVSS score of 5.3. The EPSS value of under 1% points to a low probability of exploitation in the near term. The vulnerability is not present in the CISA KEV catalog. Adversaries can exploit it by issuing a simple HTTP request to the publicly accessible log file URL, requiring no authentication or elevated privileges. This straightforward attacker path increases risk for sites with publicly readable logs.\n"}}}}, "created": "2025-10-20T13:26:45.209260+00:00", "updated": "2026-04-21T19:00:36.138326+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}