CVE-2014-125091

The CVE-2014-125091 entry concerns the codepeople cp-polls Plugin for WordPress (version 1.0.1). The vulnerability exists in the file cp-admin-int-message-list.inc.php and is triggered by manipulating the lu parameter to induce SQL injection. It is exploitable remotely, with upgrading to version ...