The vulnerability CVE-2025-32685 affects the Aristo Rinjuang WP Inquiries WordPress plugin (versions <= 0.2.1). It is caused by improper neutralization of special elements used in SQL commands, resulting in an SQL Injection flaw. The CVSS 3.1 score is 7.6 (High), with an attack vector of network, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact, no integrity impact, and low availability impact. No patch or vendor advisory is currently provided.

An attacker with high privileges on the affected system can exploit this SQL Injection vulnerability to potentially access or disclose sensitive information from the database. The vulnerability does not impact data integrity but may cause limited denial of service. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege access to the plugin and monitor for suspicious activity related to database queries involving WP Inquiries.