Sensitive Information Exposure in Content Writer Plugin for WordPress

CVE-2025-10486

What is CVE-2025-10486?

The Content Writer plugin for WordPress allows unauthenticated attackers to access sensitive data through improperly secured log files. This exposure includes critical data that could compromise the security and integrity of affected websites. All versions of the plugin up to and including 3.6.8 are impacted, necessitating immediate action to secure the plugin and protect sensitive information from potential exploitation.

References