Sensitive Information Exposure in CE21 Suite Plugin for WordPress

CVE-2025-11008

What is CVE-2025-11008?

The CE21 Suite plugin for WordPress is susceptible to a vulnerability that allows sensitive information exposure through its log files across all versions up to and including 2.3.1. This flaw enables unauthenticated attackers to access sensitive data, such as authentication credentials. If these credentials belong to users who have utilized the plugin's custom authentication feature, the attackers can gain unauthorized access to accounts, including those of administrators. This scenario poses a significant risk, as it could lead to a complete takeover of the affected WordPress site.

References