/Vulnerability Library

Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure

CVE-2025-11693
Verified

Description

Export WP Page to Static HTML & PDF WordPress plugin <= 4.3.4 contains a sensitive information exposure caused by publicly exposed cookies.txt files with authentication cookies, letting unauthenticated attackers access sensitive authentication data, exploit requires site administrator to trigger backup with specific user role.

Severity

Critical

CVSS Score

9.8

Exploit Probability

2%

Published Date

April 22, 2026

Template Author

0x_akoko

CVE-2025-11693.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2025-11693
CWE ID:
cwe-200

References

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/export-wp-page-to-static-html/export-wp-page-to-static-html-pdf-434-unauthenticated-cookie-exposure-via-log-filehttps://nvd.nist.gov/vuln/detail/CVE-2025-11693

Remediation Steps

Update to the latest version beyond 4.3.4.