Defined in 10 files
Last patched
sprintf in wordpress-plugins/plugins was changed by 7 published CVE fixes between 2019 and 2026, in 10 distinct patches that added or removed 115 lines in total.
The name occurs in 10 files: revisionary/trunk/front_rvy.php, revisionary/trunk/admin/options.php, revisionary/trunk/admin/revision-queue_rvy.php, ultimate-blocks/trunk/library/freemius/templates/forms/subscription-cancellation.php, cleantalk-spam-protect/trunk/inc/cleantalk-users.php, booking/trunk/includes/_capacity/confirmation_page.php, cleantalk-spam-protect/trunk/inc/cleantalk-comments.php, wp-table-builder/trunk/inc/core/freemius/templates/forms/subscription-cancellation.php, the-events-calendar/tags/6.6.4/src/resources/js/tec-update-6.0.0-notice.js, name-directory/trunk/admin.php.
wordpress-plugins/plugins has 851 CVEs with a located fix in total, so 1% of them touched this function.
Every published CVE whose fix changed sprintf, newest first, with the lines each fix touched.
CVE-2025-15283 · name-directory/trunk/admin.php · line 850 · +1 −1
CVE-2025-4669 · booking/trunk/includes/_capacity/confirmation_page.php · lines 94–111 · +14 −16
CVE-2024-9436 · revisionary/trunk/admin/options.php · lines 672–1024 · +11 −8 in 7 hunks
CVE-2024-9436 · revisionary/trunk/admin/revision-queue_rvy.php · lines 130–197 · +18 −8 in 5 hunks
CVE-2024-9436 · revisionary/trunk/front_rvy.php · lines 517–652 · +14 −11 in 8 hunks
CVE-2024-6931 · the-events-calendar/tags/6.6.4/src/resources/js/tec-update-6.0.0-notice.js · line 28 · +0 −1
CVE-2024-4268 · ultimate-blocks/trunk/library/freemius/templates/forms/subscription-cancellation.php · line 142 · +1 −1
CVE-2024-4700 · wp-table-builder/trunk/inc/core/freemius/templates/forms/subscription-cancellation.php · line 142 · +1 −1
CVE-2019-17515 · cleantalk-spam-protect/trunk/inc/cleantalk-comments.php · lines 88–89 · +2 −2
CVE-2019-17515 · cleantalk-spam-protect/trunk/inc/cleantalk-users.php · lines 90–91 · +2 −2
Get an alert when the next CVE fix lands in wordpress-plugins/plugins, with the patched functions.
Monitor plugins CVEsFunctions in the same files that CVE fixes also changed.
Functions in wordpress-plugins/plugins changed by the most CVE fixes.
Common questions about CVE fixes to sprintf.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
