SQL Injection Vulnerability in Outdoor Plugin for WordPress

CVE-2025-10743

What is CVE-2025-10743?

The Outdoor plugin for WordPress is susceptible to SQL Injection through the 'edit' action in all versions up to 1.3.2. This vulnerability arises from inadequate escaping of user-supplied parameters and insufficient handling of existing SQL queries. As a result, unauthenticated attackers can alter the SQL queries, potentially extracting sensitive data from the database. It is essential for users to apply updates or implement security measures to safeguard against potential exploitation.

References