PT-2025-42299 · WordPress · Ai Content Writer

D01Exploit Official · Published 2025-10-15 · Updated 2025-10-15 · CVE-2025-10486

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WordPress Content Writer plugin versions 3.6.8 and earlier

Description The Content Writer plugin for WordPress is susceptible to exposing sensitive information. This occurs due to publicly accessible log files, potentially allowing unauthenticated attackers to view sensitive data contained within them.

Recommendations Update the Content Writer plugin to a version newer than 3.6.8.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-10486

Affected Products

Ai Content Writer

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-10486 · Security Note
• https://wordpress.org/plugins/content-writer · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/bb20452b-7049-4567-8288-6d24350e2143?source=cve · Note
• https://twitter.com/VulmonFeeds/status/1978445736975925602 · Twitter Post
• https://twitter.com/CVEnew/status/1978545111165435956 · Twitter Post
• https://plugins.svn.wordpress.org/content-writer/tags/3.6.8/lib/sc_functions.php · Note
• https://t.me/CVEtracker/34976 · Telegram Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3379612%40content-writer&new=3379612%40content-writer&sfp_email=&sfph_mail= · Note