CVE-2025-11891
Medium · 5.3CVSS
5.3
EPSS
0.3%
Published
Nov 11, 2025
CISA due date
—
The record
The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119199 Nuxt is an open-source web development framework for Vue.js. CWE-538
- CVE-2026-115711 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538)… CWE-538
- CVE-2026-115707 Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538)… CWE-538
- CVE-2026-109970 A flaw was found in the clevis PKCS#11 pin. CWE-538
- CVE-2026-67361 Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory… CWE-538
- CVE-2026-19229 A vulnerability was determined in SourceCodester Online Clothing Store. CWE-538
- CVE-2026-12762 IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a… CWE-538
- CVE-2026-15574 A flaw was found in the vllm-orchestrator-gateway component. CWE-538