SQL Injection Vulnerability in Rich Snippet Site Report Plugin for WordPress

CVE-2025-10310

What is CVE-2025-10310?

The Rich Snippet Site Report plugin for WordPress exposes a vulnerability through the 'last' parameter, which lacks adequate input sanitization. This flaw allows unauthenticated attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive database information. The vulnerability can also be exploited through Cross-Site Request Forgery (CSRF), compounding the risk for affected systems. Users are advised to update to the latest version to ensure security.

References