The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to insufficient escaping on the user supplied parameter and lack of. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required.
WordPress
XSS
SQLi
Wp Polls
Wordpress Plugin
+1
NVD
GitHub
CVSS 3.1
5.4
EPSS
0.7%
Prev
Page 2 of 2