CVE-2025-11891
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.
Risk Assessment
Exposure of log files may provide an attacker with information facilitating further attacks or reveal sensitive data.
Recommendation
Update the Shelf Planner plugin to a version newer than 2.8.1 and secure or remove publicly exposed log files.
Other vulnerabilities in Shelf Planner
Original NVD description (English source)
The Shelf Planner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS