---
id: CVE-2025-11627
title: >-
  The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue
  plugin for WordPress is vulnerable to log file poisoning in all versions up
  to, and including, 1.47
summary: >-
  The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue
  plugin for WordPress is vulnerable to log file poisoning in all versions up
  to, and including, 1.47. This makes it possible for unauthenticated attackers
  to in…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L'
cwe:
  - CWE-117
published: '2025-10-30'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T10:10:00.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-11627'
references:
  - url: >-
      https://plugins.trac.wordpress.org/browser/site-checkup/tags/1.47/includes/catch-errors/class_bill_catch_errors.php#L80
    label: security@wordfence.com
  - url: 'https://plugins.trac.wordpress.org/changeset/3380169/'
    label: security@wordfence.com
  - url: >-
      https://www.wordfence.com/threat-intel/vulnerabilities/id/50251b17-58d7-4870-b825-a194312fb3e7?source=cve
    label: security@wordfence.com
tags:
  - nvd
  - exploit-available
epss: 0.00345
epssPercentile: 0.27867
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/jFriedli/CVE-2025-11627'
  checkedAt: '2026-10-27T16:44:25.643Z'
exploitAvailable: true
ingestedAt: '2026-10-01T18:55:42.301Z'
---

## Overview

The Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress is vulnerable to log file poisoning in all versions up to, and including, 1.47. This makes it possible for unauthenticated attackers to insert arbitrary content into log files, and potentially cause denial of service via disk space exhaustion.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.