What is the CVSS score of CVE-2025-10682?

CVE-2025-10682 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

WordPress CVE-2025-10682

MEDIUM

SQL Injection (CWE-89)

2025-10-15 security@wordfence.com

WordPress SQLi

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Apr 08, 2026 - 19:39 vuln.today

CVE Published

Oct 15, 2025 - 09:15 nvd

MEDIUM 6.5

DescriptionCVE.org

The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject additional SQL into queries and extract sensitive information from the database via a crafted id attribute in the 'tariffuxx_configurator' shortcode.

AnalysisAI

SQL injection in the TARIFFUXX WordPress plugin up to version 1.4 allows authenticated attackers with Contributor-level or higher privileges to inject malicious SQL commands via the 'id' attribute in the 'tariffuxx_configurator' shortcode, enabling unauthorized extraction of sensitive database information. The vulnerability exploits insufficient input sanitization in SQL query construction and requires authenticated access, resulting in a CVSS 6.5 (medium-high) rating with confirmed confidentiality impact but no availability or integrity compromise.

Technical ContextAI

The TARIFFUXX plugin processes user input from the 'tariffuxx_configurator' shortcode's 'id' attribute directly into SQL queries without proper parameterization or prepared statements. The vulnerable code is located in the Tariffuxx_admin.php (line 36) and Tariffuxx_twl.php (line 164) classes, which construct dynamic SQL without neutralizing attacker-controlled input. This is a classic SQL injection vulnerability (CWE-89: Improper Neutralization of Special Elements used in an SQL Command) where concatenation of unsanitized user input into SQL query strings creates a direct path for attackers to manipulate query logic. WordPress plugin authentication context means the attacker must first obtain Contributor-level access or higher, limiting the attack surface to legitimate site users or those who have compromised lower-privileged accounts.

Affected ProductsAI

The TARIFFUXX WordPress plugin in versions 1.4 and earlier is affected. The vulnerable code exists in the plugin's core classes (Tariffuxx_admin.php and Tariffuxx_twl.php) that process shortcode attributes. Affected installations are limited to WordPress sites with the TARIFFUXX plugin installed and active, with users holding Contributor-level or higher roles. No specific CVE CPE string is provided in the input data, but the plugin can be identified via wordpress.org plugin repository metadata. Wordfence vulnerability details and plugin repository changeset 3465105 serve as authoritative references.

RemediationAI

Upgrade the TARIFFUXX plugin to version 1.5 or later, which contains a fix committed in changeset 3465105 addressing the SQL injection vulnerability. The fix implements proper input sanitization and prepared statements to neutralize user-supplied input before SQL query execution. WordPress administrators should access the Plugins dashboard, locate TARIFFUXX, and apply the available update. For immediate mitigation prior to patching, restrict Contributor-level access to trusted users only and audit existing contributors for suspicious activity. Detailed technical remediation guidance is available at the Wordfence vulnerability report (https://www.wordfence.com/threat-intel/vulnerabilities/id/e897a83b-d746-427d-8c31-64d4eab5848e?source=cve) and the plugin repository changeset.