Skip to main content

Modalsurvey

3 CVEs vendor

Monthly

CVE-2021-47941 May 10, 12:43 HIGH POC This Week

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Survey Poll Modalsurvey
NVD Exploit-DB
CVSS 4.0
8.8
EPSS
0.1%
CVE-2024-13595 Feb 18, 05:15 MEDIUM This Month

The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Simple Signup Form Wordpress Plugin Modalsurvey
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2024-13596 Jan 30, 14:15 MEDIUM PATCH This Month

The WordPress Survey & Poll - Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'survey' shortcode in all versions up to,. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

WordPress SQLi Wordpress Survey And Poll Wordpress Plugin Modalsurvey
NVD
CVSS 3.1
6.5
EPSS
0.1%
EPSS 0% CVSS 8.8
HIGH POC This Week

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Survey Poll +1
NVD Exploit-DB
EPSS 0% CVSS 6.5
MEDIUM This Month

The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Simple Signup Form +2
NVD
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

The WordPress Survey & Poll - Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'survey' shortcode in all versions up to,. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

WordPress SQLi Wordpress Survey And Poll +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy