Sensitive Information Exposure in SSP Debug Plugin for WordPress

CVE-2025-13494

What is CVE-2025-13494?

The SSP Debug plugin for WordPress is susceptible to sensitive information exposure due to the improper storage of PHP error logs in a publicly accessible location. This misconfiguration allows unauthenticated attackers to access detailed debugging information, which includes sensitive data such as full URLs, client IP addresses, User-Agent strings, WordPress user IDs, and internal filesystem paths. As a result, this vulnerability could lead to increased risks for WordPress sites utilizing this plugin, compromising user privacy and site security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References