Security Advisory

CVE-2025-11693

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-13 04:31:33

Last updated 2026-04-08 17:23:59

Assigner Wordfence

State PUBLISHED

Description

The Export WP Page to Static HTML & PDF plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.4 through publicly exposed cookies.txt files containing authentication cookies. This makes it possible for unauthenticated attackers to cookies that may have been injected into the log file if the site administrator triggered a back-up using a specific user role like administrator.

← Browse all CVEs View on cve.org ↗