CVE-2025-10683

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10683", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-18T12:32:56.293Z", "datePublished": "2025-11-06T02:31:05.341Z", "dateUpdated": "2026-04-08T17:20:06.152Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:20:06.152Z"}, "affected": [{"vendor": "yudiz", "product": "Easy Email Subscription", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "title": "Easy Email Subscription <= 1.3 - Authenticated (Admin+) SQL Injection via uid", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2353d9d-d5ae-4470-9c0f-119acecd6686?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3388578/email-subscription-with-secure-captcha"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.9, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Yudha - DJ"}], "timeline": [{"time": "2025-10-07T05:24:52.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-05T14:24:51.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-06T16:53:42.833984Z", "id": "CVE-2025-10683", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-06T16:54:25.147Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10683", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-06T16:53:42.833984Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-06T16:54:22.103Z"}}], "cna": {"title": "Easy Email Subscription <= 1.3 - Authenticated (Admin+) SQL Injection via uid", "credits": [{"lang": "en", "type": "finder", "value": "Muhammad Yudha - DJ"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "yudiz", "product": "Easy Email Subscription", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "1.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-07T05:24:52.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-05T14:24:51.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2353d9d-d5ae-4470-9c0f-119acecd6686?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3388578/email-subscription-with-secure-captcha"}], "descriptions": [{"lang": "en", "value": "The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-06T02:31:05.341Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10683", "state": "PUBLISHED", "dateUpdated": "2025-11-06T16:54:25.147Z", "dateReserved": "2025-09-18T12:32:56.293Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-06T02:31:05.341Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Easy Email Subscription", "vendor": "yudiz", "versions": [{"lessThanOrEqual": "1.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Easy Email Subscription plugin for WordPress is vulnerable to SQL Injection via the 'uid' parameter in all versions up to, and including, 1.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}, {"lang": "es", "value": "El plugin Easy Email Subscription para WordPress es vulnerable a inyecci\u00f3n SQL a trav\u00e9s del par\u00e1metro 'uid' en todas las versiones hasta la 1.3, inclusive, debido a un escape insuficiente en el par\u00e1metro proporcionado por el usuario y la falta de preparaci\u00f3n suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, a\u00f1adan consultas SQL adicionales en consultas ya existentes que pueden ser utilizadas para extraer informaci\u00f3n sensible de la base de datos."}], "id": "CVE-2025-10683", "lastModified": "2026-10-07T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10683", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-06T16:53:42.833984Z", "version": "2.0.3"}}]}, "published": "2025-11-06T03:15:34.090", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3388578/email-subscription-with-secure-captcha"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c2353d9d-d5ae-4470-9c0f-119acecd6686?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T01:49:25.880861+00:00", "value": {"mitigation_remediation": ["Upgrade Easy Email Subscription to a version newer than 1.3 if one is available; if no updated version exists, deactivate or remove the plugin from the site.", "Limit administrative access by restricting Administrator role usage to trusted users and enforcing strong authentication methods.", "Apply the principle of least privilege to the WordPress database user so that it cannot execute arbitrary SQL queries beyond what the application requires.", "Monitor database logs for abnormal query activity, and investigate any suspicious execution patterns promptly."], "summary": {"action": "Apply Patch", "impact": "Authenticated SQL Injection enabling data exfiltration"}, "threat_synthesis": {"affected_systems": "The issue affects all installations of the yudiz Easy Email Subscription plugin version 1.3 and earlier. Any WordPress site that has this plugin activated and possesses a user account with Administrator or higher privileges is susceptible to exploitation.", "description_and_impact": "The Easy Email Subscription WordPress plugin contains a SQL injection flaw that is triggered through the 'uid' parameter. Because the plugin does not properly escape user-supplied input and fails to prepare the underlying SQL query, an attacker who can authenticate as an administrator can embed additional SQL statements. This vulnerability allows the execution of arbitrary queries against the database and the retrieval of sensitive data, undermining the confidentiality of the WordPress site's contents and the information stored in the associated database.", "risk_and_exploitability": "The CVSS score of 4.9 indicates a moderate severity risk, while the EPSS score of less than 1% suggests that the likelihood of exploitation in the wild remains low. The vulnerability is not currently listed in the CISA KEV catalog. Exploitation requires a legitimate administrator account and is therefore confined to authenticated users; an attacker must first gain elevated WordPress credentials before leveraging the flaw to extract data."}}}}, "created": "2025-11-06T10:06:46.690259+00:00", "updated": "2026-04-21T02:00:12.285593+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress", "yudiz", "yudiz$PRODUCT$easy_email_subscription"]}