CVE-2025-11008

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-11008", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-25T20:57:59.568Z", "datePublished": "2025-11-04T03:26:46.726Z", "dateUpdated": "2026-04-08T17:09:17.322Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:09:17.322Z"}, "affected": [{"vendor": "ce21com", "product": "CE21 Suite", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.3.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as other users as long as they have used the plugin's custom authentication feature before. This may include administrators, which makes a complete site takeover possible."}], "title": "CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/91aa86d9-8e42-4deb-b6ca-c3b388fefcb1?source=cve"}, {"url": "https://wordpress.org/plugins/ce21-suite/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-532 Insertion of Sensitive Information into Log File", "cweId": "CWE-532", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Kenneth Dunn"}], "timeline": [{"time": "2025-11-03T15:24:06.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-04T18:48:17.458623Z", "id": "CVE-2025-11008", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T18:48:23.226Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11008", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-04T18:48:17.458623Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-04T18:48:20.734Z"}}], "cna": {"title": "CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation", "credits": [{"lang": "en", "type": "finder", "value": "Kenneth Dunn"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "ce21com", "product": "CE21 Suite", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "2.3.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-03T15:24:06.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/91aa86d9-8e42-4deb-b6ca-c3b388fefcb1?source=cve"}, {"url": "https://wordpress.org/plugins/ce21-suite/"}], "descriptions": [{"lang": "en", "value": "The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as other users as long as they have used the plugin's custom authentication feature before. This may include administrators, which makes a complete site takeover possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of Sensitive Information into Log File"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-04T03:26:46.726Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11008", "state": "PUBLISHED", "dateUpdated": "2025-11-04T18:48:23.226Z", "dateReserved": "2025-09-25T20:57:59.568Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-04T03:26:46.726Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "CE21 Suite", "vendor": "ce21com", "versions": [{"lessThanOrEqual": "2.3.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The CE21 Suite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.1 via the log file. This makes it possible for unauthenticated attackers to extract sensitive data including authentication credentials, which can be used to log in as other users as long as they have used the plugin's custom authentication feature before. This may include administrators, which makes a complete site takeover possible."}, {"lang": "es", "value": "El plugin CE21 Suite para WordPress es vulnerable a la Divulgaci\u00f3n de Informaci\u00f3n Sensible en todas las versiones hasta la 2.3.1, inclusive, a trav\u00e9s del archivo de registro. Esto permite a atacantes no autenticados extraer datos sensibles, incluyendo credenciales de autenticaci\u00f3n, que pueden usarse para iniciar sesi\u00f3n como otros usuarios siempre y cuando hayan utilizado previamente la funci\u00f3n de autenticaci\u00f3n personalizada del plugin. Esto puede incluir a administradores, lo que hace posible una toma de control completa del sitio."}], "id": "CVE-2025-11008", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11008", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-04T18:48:17.458623Z", "version": "2.0.3"}}]}, "published": "2025-11-04T04:15:37.113", "references": [{"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/ce21-suite/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/91aa86d9-8e42-4deb-b6ca-c3b388fefcb1?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T12:33:18.559012+00:00", "value": {"mitigation_remediation": ["Update CE21 Suite to the latest version released after 2.3.1 to apply the official fix for the log file exposure.", "Immediately delete any existing log files that may have been written by the vulnerable plugin, as they could contain exposed credentials.", "Configure file permissions on your WordPress installation to restrict read access to logs, and consider disabling the plugin\u2019s log feature if it is not required.\n", "If the custom authentication feature of CE21 Suite is not essential, disable or remove it to reduce the attack surface and eliminate the stored credentials from the logs."], "summary": {"action": "Immediate Patch", "impact": "Unauthenticated sensitive information exposure enabling privilege escalation"}, "threat_synthesis": {"affected_systems": "WordPress sites running the CE21 Suite plugin version 2.3.1 or earlier are affected. The vulnerability was documented for all releases up to and including 2.3.1; newer releases are expected to have the issue fixed.", "description_and_impact": "The CE21 Suite plugin for WordPress has a flaw that allows anyone without authentication to read the plugin\u2019s log file, which can contain authentication credentials. Because the plugin\u2019s custom authentication feature records these credentials, an attacker can obtain login details for any user who has previously used the feature, including administrators. This vulnerability is identified as CWE\u2011532 and effectively provides the attacker with the ability to log in as privileged users and potentially take full control of the site.", "risk_and_exploitability": "With a CVSS score of 9.8, this issue is classified as critical. The EPSS score is less than 1%, indicating that the probability of exploitation in the wild is low at present, and the vulnerability is not listed in CISA\u2019s KEV catalog. Nevertheless, the impact is severe: an unauthenticated attacker who can access the log file can immediately obtain valid credentials, elevate privileges, and potentially take over the entire WordPress installation. The attack vector is straightforward\u2014an attacker simply retrieves the log file publicly accessible through the plugin\u2019s interface or a predictable URL. Because no prior authentication is required, the risk is high for any site still running a vulnerable version."}}}}, "created": "2025-11-04T16:33:16.913475+00:00", "updated": "2026-04-22T12:45:17.020559+00:00", "vendors": ["ce21", "ce21$PRODUCT$ce21-suite", "wordpress", "wordpress$PRODUCT$wordpress"]}