PT-2025-44372 · WordPress · Site Checkup Debug Ai Troubleshooting With Wizard/Tips For Each Issue

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-11627

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue plugin for WordPress versions prior to 1.48

Description The software is susceptible to log file poisoning, allowing unauthenticated attackers to insert arbitrary content into log files. This could potentially lead to a denial of service by filling up disk space.

Recommendations Update to version 1.48 or later.

Fix

DoS

Weakness Enumeration

CWE-117

Related Identifiers

CVE-2025-11627

Affected Products

Site Checkup Debug Ai Troubleshooting With Wizard/Tips For Each Issue

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-11627 · Security Note
• https://twitter.com/VulmonFeeds/status/1983783914339533135 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/3380169 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/50251b17-58d7-4870-b825-a194312fb3e7?source=cve · Note
• https://t.me/CVEtracker/36151 · Telegram Post
• https://plugins.trac.wordpress.org/browser/site-checkup/tags/1.47/includes/catch-errors/class_bill_catch_errors.php#L80 · Note
• https://twitter.com/CVEnew/status/1983773539397259505 · Twitter Post