---
title: "Discussion on \"CVE-2025-3809 in Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting\" | Hashnode"
description: "Discussion on \"CVE-2025-3809 in Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting\". Recently, our team initiated a security review of «Debug Log Manager» (WordPress plugins). As part of this effort, we set up a new WordPress instance in Docker locally and began installing widely used plugins to test them in a controlled environment...."
url: "https://hashnode.com/posts/cve-2025-3809-in-debug-log-manager-234-unauthenticated-stored-xss/68a79a5677fed0215b514513"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [CVE-2025-3809 in Debug Log Manager <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting](https://blog.haysec.com/cve-2025-3809-in-debug-log-manager-234-unauthenticated-stored-xss?utm_source=hashnode&utm_medium=feed)

Recently, our team initiated a security review of «Debug Log Manager» (WordPress plugins). As part of this effort, we set up a new WordPress instance in Docker locally and began installing widely used plugins to test them in a controlled environment....

Aug 21, 2025 · 2 min read · blog.haysec.com  
Updated Aug 26, 2025  
Read the article

-   [#cybersecurity-1](https://hashnode.com/tag/cybersecurity-1)
-   [#xss](https://hashnode.com/tag/xss)
-   [#wordpress](https://hashnode.com/tag/wordpress)
-   [#hacking](https://hashnode.com/tag/hacking)
-   [#research](https://hashnode.com/tag/research)
-   [#offensive-security](https://hashnode.com/tag/offensive-security)

## Written by

[Y45NG](https://hashnode.com/@Y45N)

@Y45N

  
[View profile](https://hashnode.com/@Y45N)

CybrExp

## Responses

Markdown supported · ⌘↵ to post

No responses yet.