UpHeron
All vulnerabilities

WordPress core

CVE-2017-16510

WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as demonstrated by a "double prepare" approach, a different vulnerability than CVE-2017-14723.

Severity
Critical 9.8
Published
2 Nov 2017
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Every version up to 4.8.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-16510
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-16510