SQL Injection Vulnerability in WP Links Page Plugin for WordPress

CVE-2025-10175

What is CVE-2025-10175?

The WP Links Page plugin for WordPress suffers from an SQL Injection vulnerability through the 'id' parameter due to inadequate input escaping and insufficient query preparation. This allows authenticated attackers with Subscriber-level access and above to inject additional SQL commands. These commands can manipulate existing queries, potentially leading to unauthorized access and extraction of sensitive database information.

References