CVE-2017-16510

WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi) in plugins and themes, as demonstrated by a "double prepare" approach, a different vulnerability than CVE-2017-14723.

We have discovered 509,485 live websites that are affected by CVE-2017-16510.

Run a Free Instant Scan

Affected Software

Product	WordPress
Category	Content Management System
Vulnerable Domains	509,485 live websites (5.86% of WordPress install base)
Vulnerable Versions	from 0 through 4.8.3
Vulnerable Versions Count	344 versions ( 52% of all versions)