samperrow vulnerabilities

Products

• Pre* Party Resource Hints 2

Latest samperrow CVEs

Newest publication first

1. CVE-2026-4087 Pre* Party Resource Hints <= 1.8.20 - Authenticated (Subscriber+) SQL Injection via 'hint_ids' Parameter

   Published 2026-03-21

   Medium·CVSS 6.5 EPSS 0.28%

   The Pre* Party Resource Hints plugin for WordPress is vulnerable to SQL Injection via the 'hint_ids' parameter of the pprh_update_hints AJAX action in all versions up to, and including, 1.8.20. This is due to insufficient escaping on the user supplied parameter and lack of suffic...

2. CVE-2023-50855 WordPress Pre* Party Resource Hints Plugin <= 1.8.18 is vulnerable to SQL Injection

   Published 2023-12-28

   High·CVSS 7.2 EPSS 0.53%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sam Perrow Pre* Party Resource Hints.This issue affects Pre* Party Resource Hints: from n/a through 1.8.18.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.