CVE-2025-10743 is an SQL Injection vulnerability (CWE-89) affecting the Outdoor WordPress plugin by maycorolbuche1. The issue arises from insufficient escaping and lack of prepared statements on a user-supplied parameter in the 'edit' action, enabling unauthenticated attackers to append malicious SQL commands to existing queries. This can lead to unauthorized disclosure of sensitive database information. The vulnerability affects all versions up to 1.3.2 and has a CVSS 3.1 base score of 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation allows unauthenticated attackers to extract sensitive information from the database by injecting SQL commands. The vulnerability impacts confidentiality but does not affect integrity or availability according to the CVSS vector. There are no known exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from the vendor maycorolbuche1 and apply any released patches promptly. Until a fix is available, consider disabling or removing the Outdoor plugin if possible to mitigate risk.