Lucene search
K

6 matches found

CNVD
CNVD
added 2025/10/21 12:0 a.m.4 views

WordPress Rich Snippet Site Report plugin SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress Rich Snippet Site Report plugin suffers from a SQL injection vulnerability that stems from insufficient cleanup and escaping of user-supplied parameter last and...

4.9CVSS8.2AI score0.00071EPSS
Exploits0References1
CVE
CVE
added 2025/10/15 8:25 a.m.14 views

CVE-2025-10310

The WordPress plugin Rich Snippet Site Report (Rich Snippet Site Report) is affected by CVE-2025-10310: SQL Injection via the last parameter in versions up to and including 2.0.0105. The issue arises from insufficient escaping of user-supplied input and inadequate preparation of the SQL query, en...

4.9CVSS6.3AI score0.00071EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/15 8:25 a.m.2 views

CVE-2025-10310 Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS6.3AI score0.00071EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/15 8:25 a.m.5 views

CVE-2025-10310 Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS0.00071EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/15 8:25 a.m.2 views

EUVD-2025-34567

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS6.2AI score0.00071EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/10/15 12:45 a.m.4 views

WordPress Rich Snippet Site Report plugin <= 2.0.0105 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by johska in WordPress Theme Rich Snippet Site Report versions = 2.0.0105...

4.9CVSS8AI score0.00071EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder