Skip to main content

Wordpress Poll

1 CVEs product

Monthly

CVE-2020-24315 Aug 26, 14:15 HIGH POC This Week

Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Wordpress Plugin Wordpress Poll
NVD
CVSS 3.1
7.5
EPSS
2.0%
EPSS 2% CVSS 7.5
HIGH POC This Week

Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Wordpress Plugin +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy