7 matches found
WordPress Pre* Party Resource Hints plugin <= 1.8.20 - Authenticated (Subscriber+) SQL Injection via 'hint_ids' Parameter vulnerability
Authenticated Subscriber+ SQL Injection via 'hintids' Parameter vulnerability discovered by Chawabhon Netisingha JNX03 in WordPress Plugin Pre Party Resource Hints versions = 1.8.20...
CVE-2026-4087: Improper Neutralization of Special Elements used in an SQL Command
The Pre Party Resource Hints plugin for WordPress is vulnerable to SQL Injection via the 'hintids' parameter of the pprhupdatehints AJAX action in all versions up to, and including, 1.8.20. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
EUVD-2023-55588
Malicious code in bioql PyPI...
CVE-2023-50855
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sam Perrow Pre Party Resource Hints.This issue affects Pre Party Resource Hints: from n/a through 1.8.18...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sam Perrow Pre Party Resource Hints.This issue affects Pre Party Resource Hints: from n/a through 1.8.18...
CVE-2023-50855
CVE-2023-50855 is an SQL injection issue in the Pre* Party Resource Hints WordPress plugin (Pre* Party Resource Hints
CVE-2023-50855: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sam Perrow Pre Party Resource Hints.This issue affects Pre Party Resource Hints: from n/a through 1.8.18...