CVE-2017-5611

SQL injection vulnerability in wp-includes/class-wp-query.php in WPQuery in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name...

CVE-2017-5611: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wp-includes/class-wp-query.php in WPQuery in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name...

PT-2017-4047

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.2 Description The issue is related to a SQL injection vulnerability in the WP Query function, specifically in the wp-includes/class-wp-query.php file. This vulnerability can be exploited by remote attackers to...