CVE-2013-1401

Cardoza WordPress Poll plugin for WordPress (versions around 34.05/34.5) contains multiple vulnerable functions (editAnswer, deleteAnswer, addAnswer, deletePoll) that can be reached via external AJAX calls. The issues enable remote attackers to manipulate polls (add/edit/delete answers, delete po...

CVE-2013-1401

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

CVE-2013-1400

CVE-2013-1400 affects Cardoza WordPress Poll plugin (34.05) / Cardoza WordPress Poll plugin 34.05. The vulnerability is in CWPPoll.js (viewPollResults and userlogs) where the poll_id pollid parameter is not sanitized, allowing remote SQL injections. This can enable manipulation of backend data or...

CVE-2013-1400

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or pollid parameter in a viewPollResults or userlogs action...

CVE-2013-1401: Improper Neutralization of Special Elements used in an SQL Command

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

CVE-2013-1400: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or pollid parameter in a viewPollResults or userlogs action...

WordPress democracy-poll plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. democracy-poll is an online poll plugin used in it. A cross-site request forgery vulnerability exists in the WordPress democracy-poll...

CVE-2019-9914

The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes pollid XSS...

WordPress Survey And Poll 1.5.7.3 SQL Injection

Exploit Title: Wordpress Plugin Survey & Poll 1.5.7.3 - 'sssparams' SQL Injection Date: 2018-09-09 Exploit Author: Ceylan Bozogullarindan Vendor Homepage: http://modalsurvey.pantherius.com/ Software Link: https://downloads.wordpress.org/plugin/wp-survey-and-poll.zip Version: 1.5.7.3 Tested on:...

WordPress Plugin Simply Poll SQL Injection Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the pollid parameter of the Simply Poll admin-ajax.php page of the...

WordPress Simply Poll Plugin <= 1.4.1 - SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit other vulnerabilities in the underlying database. Solution Update the plugin to the latest plugin version...

WP 插件 Easy Poll 1.1.3 XSS 漏洞

No description provided by source...

WordPress WP Easy Poll Plugin 1.1.3 - Multiple Vulnerabilities

This plugin is prone to XSS and CSRF vulnerabilities. Solution Update the plugin...

CVE-2015-2090

The CVE-2015-2090 issue affects the WordPress Survey and Poll plugin (version 1.1.7) and is caused by a blind SQL injection in the ajax_survey function (settings.php) that processes the survey_id parameter sent to wp-admin/admin-ajax.php. Exploitation could allow remote attackers to execute arbit...

vanilla forums poll plugin 0.9 - Stored XSS

No description provided by source. Title: Vanilla Poll 0.9 Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla Poll 0.9 http://vanillaforums.org/download http://vanillaforums.org/addon/poll-plugin...

WordPress Simply Poll Plugin 1.4.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/ Software Link:...

Cardoza WordPress Poll 34.05 SQL Injection Vulnerability

Cardoza WordPress Poll plugin version 34.05 suffers from multiple remote SQL injection vulnerabilities. Exploit Title : Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin Author:Marcela Benetrix home:www.girlinthemiddle.net Date: 01/21/13 version: 34.05 software...

WordPress Simply Poll Plugin 1.4.1 - CSRF / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/ Software...

WordPress Simply Poll Plugin 1.4.1 - Multiple Vulnerabilities

Simply Poll plugin is prone to a cross-site scripting and CSRF vulnerabilities. Solution After a email to [email protected], Simply Poll plugin was deleted...

WordPress Poll Plugin 'poll_id' Parameter SQL Injection

The WordPress Poll Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'pollid' parameter of the 'wp-admin/admin-ajax.php' script. An unauthenticated, remote attacker can leverage this issue to launch a...