CVE-2025-11891

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-11891", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-10-16T19:06:56.650Z", "datePublished": "2025-11-11T03:30:32.784Z", "dateUpdated": "2026-04-08T16:37:32.470Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:37:32.470Z"}, "affected": [{"vendor": "shelfplanner", "product": "Shelf Planner Inventory Management for WooCommerce", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.8.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files."}], "title": "Shelf Planner <= 2.8.1 - Unauthenticated Information Exposure via Log Files", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/17f17cae-f444-4fa1-9090-ec6ea267ef2e?source=cve"}, {"url": "https://wordpress.org/plugins/shelf-planner/#developers"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory", "cweId": "CWE-538", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "timeline": [{"time": "2025-11-10T15:14:22.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-12T17:30:06.460074Z", "id": "CVE-2025-11891", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-12T20:09:13.100Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11891", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-12T17:30:06.460074Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-12T17:30:08.728Z"}}], "cna": {"title": "Shelf Planner <= 2.7.0 - Unauthenticated Information Exposure via Log Files", "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "shelfplanner", "product": "Shelf Planner", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "2.7.0"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-10T15:14:22.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/17f17cae-f444-4fa1-9090-ec6ea267ef2e?source=cve"}, {"url": "https://wordpress.org/plugins/shelf-planner/"}], "descriptions": [{"lang": "en", "value": "The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.0 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-538", "description": "CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-11T03:30:32.784Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11891", "state": "PUBLISHED", "dateUpdated": "2025-11-12T20:09:13.100Z", "dateReserved": "2025-10-16T19:06:56.650Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-11T03:30:32.784Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Shelf Planner Inventory Management for WooCommerce", "vendor": "shelfplanner", "versions": [{"lessThanOrEqual": "2.8.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files."}, {"lang": "es", "value": "El plugin Shelf Planner para WordPress es vulnerable a la Exposici\u00f3n de Informaci\u00f3n Sensible en todas las versiones hasta la 2.7.0, inclusive, a trav\u00e9s de archivos de registro expuestos p\u00fablicamente. Esto permite que atacantes no autenticados vean informaci\u00f3n potencialmente sensible contenida en los archivos de registro expuestos."}], "id": "CVE-2025-11891", "lastModified": "2026-10-07T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11891", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-12T17:30:06.460074Z", "version": "2.0.3"}}]}, "published": "2025-11-11T04:15:44.447", "references": [{"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/shelf-planner/#developers"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/17f17cae-f444-4fa1-9090-ec6ea267ef2e?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-538"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T21:15:24.950253+00:00", "value": {"mitigation_remediation": ["Upgrade Shelf Planner to version 2.8.2 or later, which removes the publicly exposed log files.", "Configure the web server to deny direct access to log directories or file types used by the plugin, ensuring they cannot be reached by unauthenticated users.", "Delete or archive any existing sensitive log files hosted in the plugin's directory and set appropriate file permissions to restrict access."], "summary": {"action": "Upgrade Plugin", "impact": "Sensitive information disclosure via log file exposure"}, "threat_synthesis": {"affected_systems": "The issue affects Shelf Planner Inventory Management for WooCommerce plugin versions up to and including 2.8.1. Users who are running any of these versions and have not applied recent updates are at risk.", "description_and_impact": "The Shelf Planner plugin for WordPress was found to expose sensitive information through publicly accessible log files. An attacker who can reach the web directory can read log contents that may contain credentials, user data, or system configuration details. This vulnerability falls under CWE-538, which describes information exposure through logs.", "risk_and_exploitability": "The vulnerability carries a CVSS score of 5.3, placing it in the moderate severity range, and an EPSS score of less than 1%, indicating a low likelihood of immediate exploitation. It is not listed in CISA's KEV catalog. Because the attack requires no authentication and relies on openly accessible files, vulnerable sites can be compromised from any external location by simply navigating to the log path."}}}}, "created": "2025-11-12T12:48:00.725714+00:00", "updated": "2026-04-22T21:15:27.685236+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}