CVE-2025-10310

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10310", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-11T22:53:20.197Z", "datePublished": "2025-10-15T08:25:51.504Z", "dateUpdated": "2026-04-08T16:41:38.084Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:41:38.084Z"}, "affected": [{"vendor": "jayce53", "product": "Rich Snippet Site Report", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.0.0105", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can also be exploited via CSRF."}], "title": "Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2242c86e-c769-4104-b266-0cdcd90ccf63?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/easysnippet/tags/2.0.0105/lib/EasySnippet.php#L100"}, {"url": "https://wordpress.org/plugins/easysnippet/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.9, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "JohSka"}], "timeline": [{"time": "2025-10-14T19:47:01.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-15T19:36:17.043041Z", "id": "CVE-2025-10310", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T19:37:25.257Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10310", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-15T19:36:17.043041Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-15T19:36:21.431Z"}}], "cna": {"title": "Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection", "credits": [{"lang": "en", "type": "finder", "value": "JohSka"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "jayce53", "product": "Rich Snippet Site Report", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.0.0105"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-14T19:47:01.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2242c86e-c769-4104-b266-0cdcd90ccf63?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/easysnippet/tags/2.0.0105/lib/EasySnippet.php#L100"}, {"url": "https://wordpress.org/plugins/easysnippet/"}], "descriptions": [{"lang": "en", "value": "The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can also be exploited via CSRF."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:41:38.084Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10310", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:41:38.084Z", "dateReserved": "2025-09-11T22:53:20.197Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-15T08:25:51.504Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Rich Snippet Site Report", "vendor": "jayce53", "versions": [{"lessThanOrEqual": "2.0.0105", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This can also be exploited via CSRF."}, {"lang": "es", "value": "El plugin Rich Snippet Site Report para WordPress es vulnerable a inyecci\u00f3n SQL a trav\u00e9s del par\u00e1metro 'last' en todas las versiones hasta la 2.0.0105, inclusive, debido a un escape insuficiente en el par\u00e1metro proporcionado por el usuario y a la falta de preparaci\u00f3n suficiente en la consulta SQL existente. Esto permite que atacantes no autenticados a\u00f1adan consultas SQL adicionales a consultas ya existentes que pueden usarse para extraer informaci\u00f3n sensible de la base de datos. Esto tambi\u00e9n puede ser explotado a trav\u00e9s de CSRF."}], "id": "CVE-2025-10310", "lastModified": "2026-10-08T12:10:00.217", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10310", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-10-15T19:36:17.043041Z", "version": "2.0.3"}}]}, "published": "2025-10-15T09:15:39.967", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/easysnippet/tags/2.0.0105/lib/EasySnippet.php#L100"}, {"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/easysnippet/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2242c86e-c769-4104-b266-0cdcd90ccf63?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-27T23:42:00.908927+00:00", "value": {"mitigation_remediation": ["Upgrade the Rich Snippet Site Report plugin to version 2.0.0106 or later, which contains a patch for the SQL injection flaw.", "If an upgrade cannot be performed immediately, deactivate the plugin entirely on all affected WordPress sites to remove the vulnerable code.", "Configure a web application firewall or server rule to block HTTP requests that include the 'last' parameter when targeting the plugin, or otherwise enforce strict authentication and CSRF protection for that endpoint."], "summary": {"action": "Apply Patch", "impact": "SQL Injection"}, "threat_synthesis": {"affected_systems": "WordPress sites running the Rich Snippet Site Report plugin in any version up to and including 2.0.0105 are vulnerable. Versions beyond 2.0.0105 are not known to contain this flaw, but the patch only applies to installations using the affected range.", "description_and_impact": "The Rich Snippet Site Report plugin for WordPress contains an SQL injection flaw caused by insufficient escaping of the 'last' parameter and the lack of preparation on the underlying query. This vulnerability allows an attacker to inject arbitrary SQL, enabling the extraction or manipulation of sensitive database information. The issue is directly tied to CWE-89, representing improper input handling for SQL statements.", "risk_and_exploitability": "The CVSS score of 4.9 indicates a moderate severity, while the EPSS score of fewer than 1% suggests exploitation is unlikely in the wild at this time. The vulnerability is not listed in the CISA KEV catalog, further reflecting its lower threat prominence. Attackers can exploit the flaw by sending crafted requests containing the 'last' parameter, which can be delivered via standard plugin interactions or through a CSRF vector, making it accessible to unauthenticated or low-privilege users."}}}}, "created": "2025-10-20T13:27:03.193841+00:00", "updated": "2026-04-27T23:45:15.894682+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}