4 matches found
Linux Distros Unpatched Vulnerability : CVE-2017-16510
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 4.8.3 is affected by an issue where $wpdb-prepare can create unexpected and unsafe queries leading to potential SQL injection SQLi in plugins a...
UBUNTU-CVE-2017-16510
WordPress before 4.8.3 is affected by an issue where $wpdb-prepare can create unexpected and unsafe queries leading to potential SQL injection SQLi in plugins and themes, as demonstrated by a "double prepare" approach, a different vulnerability than CVE-2017-14723...
PT-2017-14435
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.8.3 Description The issue allows for potential SQL injection SQLi in plugins and themes due to the $wpdb-prepare function creating unexpected and unsafe queries. This can be exploited using a "double prepare"...
CVE-2017-16510: Improper Neutralization of Special Elements used in an SQL Command
WordPress before 4.8.3 is affected by an issue where $wpdb-prepare can create unexpected and unsafe queries leading to potential SQL injection SQLi in plugins and themes, as demonstrated by a "double prepare" approach, a different vulnerability than CVE-2017-14723...