CVE-2025-11627Medium· 6.5▾ TwilightPoC available

The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47

The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to in…

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score48/ 100 · Moderate

impact 35.8 · likelihood 0.1 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Oct 30, 2025

Updated

Oct 8, 2026

CVSS

6.5

Vendor

—

Product

—

CWE

CWE-117

Depth score

48 · Moderate

EPSS

0.34% · p28

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Exploit availability

Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.

checked 2026-10-27

GitHub PoCs

1 public repository

jFriedli/CVE-2025-11627 ↗

EPSS history

Exploit-prediction probability, daily snapshots since Oct 1.

0.3% → 0.3%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 363 days

Oct 30, 2025Published
Disclosed via NVD
Oct 1, 2026EPSS first tracked
0.3%
Oct 8, 2026Record revised
Last analysed / modified upstream
Oct 27, 2026Public exploit observed
1 GitHub repo (last check)

CWE-117 #nvd #exploit-available

Full technical detail▾

Overview

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#exploit-available

← Back to feed