PT-2025-51053 · WordPress · Export Wp Page To Static Html & Pdf

Published 2025-12-13 · Updated 2026-04-23 · CVE-2025-11693

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Export WP Page to Static HTML & PDF plugin for WordPress versions up to and including 4.3.4

Description The software is susceptible to sensitive information exposure due to publicly exposed cookies.txt files containing authentication cookies. This allows unauthenticated attackers to potentially access cookies, including those injected into the log file when a site administrator triggers a backup using a specific user role, such as 'administrator'. This could lead to complete site compromise.

Recommendations Disable the plugin for versions prior to and including 4.3.4. Restrict access to the cookies.txt file.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-11693

Affected Products

Export Wp Page To Static Html & Pdf

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-11693 · Security Note
• https://twitter.com/cracbot/status/2001608422937235716 · Twitter Post
• https://twitter.com/pdnuclei_bot/status/2047284401927770499 · Twitter Post
• https://twitter.com/MNovofastovsky/status/2000901935151321189 · Twitter Post
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3388166%40export-wp-page-to-static-html&new=3388166%40export-wp-page-to-static-html&sfp_email=&sfph_mail= · Note
• https://twitter.com/offseq/status/1999714160490463611 · Twitter Post
• https://twitter.com/0dayPublishing/status/1999704700648587454 · Twitter Post
• https://twitter.com/CveFindCom/status/1999882175454249342 · Twitter Post
• https://t.me/CVEtracker/39687 · Telegram Post
• https://twitter.com/CVEnew/status/1999865340369760508 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/cd28ac3c-aaef-49e3-843d-8532404703c9?source=cve · Note