CVE-2025-10310: 
WordPress vulnerability analysis and mitigation

The Rich Snippet Site Report plugin for WordPress contains a SQL Injection vulnerability (CVE-2025-10310) discovered on October 14, 2025. The vulnerability affects all versions up to and including 2.0.0105, where the 'last' parameter is susceptible to SQL injection attacks due to insufficient escaping of user-supplied parameters and inadequate SQL query preparation (NVD Database).

The vulnerability is classified as CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) with a CVSS v3.1 base score of 4.9 (Medium). The vector string is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N, indicating network accessibility, low attack complexity, high privileges required, no user interaction needed, and potential for high confidentiality impact (NVD Database).

The vulnerability allows unauthenticated attackers to append additional SQL queries to existing queries, potentially leading to the extraction of sensitive information from the database. The impact is primarily focused on data confidentiality, with no direct impact on system integrity or availability (NVD Database).

As of October 14, 2025, the plugin has been temporarily closed and is not available for download pending a full security review (WordPress Plugin).