CVE 5.3 MEDIUM

Shelf Planner <= 2.7.0 - Unauthenticated Information Exposure via Log Files_CVE-2025-11891

5.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.0 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.

Basic Information

ID CVE-2025-11891
Source Wordfence
Published Nov 11, 2025 at 03:30

Affected Product

Vendor shelfplanner
Product Shelf Planner
Version *
Affected Versions shelfplanner Shelf Planner *

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.