Lucene search

CVE-2023-50855 WordPress Pre* Party Resource Hints Plugin <= 1.8.18 is vulnerable to SQL Injection

🗓️ 28 Dec 2023 11:11:19Reported by PatchstackType

WordPress plugin SQL Injection vulnerability CVE-2023-5085

Reporter	Title	Published	Views	Family All 6
WPVulnDB	Pre* Party Resource Hints < 1.8.20 - Admin+ SQLi	5 Jan 202400:00	–	wpvulndb
CVE	CVE-2023-50855	28 Dec 202312:15	–	cve
NVD	CVE-2023-50855	28 Dec 202312:15	–	nvd
Patchstack	WordPress Pre* Party Resource Hints Plugin <= 1.8.19 is vulnerable to SQL Injection	21 Dec 202300:00	–	patchstack
Prion	Sql injection	28 Dec 202312:15	–	prion
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 18, 2023 to December 31, 2023)	5 Jan 202413:20	–	wordfence

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "pre-party-browser-hints",
    "product": "Pre* Party Resource Hints",
    "vendor": "Sam Perrow",
    "versions": [
      {
        "lessThanOrEqual": "1.8.18",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/pre-party-browser-hints/wordpress-pre-party-resource-hints-plugin-1-8-18-sql-injection-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Dec 2023 11:19Current

8.1High risk

Vulners AI Score8.1

CVSS37.6

EPSS0.001

CWE-89