CVE-2025-11627 is a vulnerability in the sminozzi Site Checkup Debug AI Troubleshooting with Wizard and Tips for Each Issue WordPress plugin affecting all versions up to 1.47. It involves improper output neutralization for logs (CWE-117), enabling unauthenticated attackers to insert arbitrary content into log files. This can lead to log file poisoning and may cause denial of service via disk space exhaustion. The vulnerability has a CVSS 3.1 base score of 6.5 with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact.

An attacker can inject arbitrary content into log files without authentication, potentially poisoning logs. This may disrupt log integrity and cause denial of service by exhausting disk space. There is no confidentiality impact, but integrity and availability impacts are present. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider monitoring log file sizes and implementing controls to limit log growth. Avoid exposing the plugin to untrusted inputs where possible. No vendor-provided patches or temporary fixes are currently documented.