Cardoza WordPress Poll <= 36 - Authenticated SQL Injection

The Cardoza WordPress Poll plugin was vulnerable to authenticated SQL Injection in the "pollid" POST parameter when submitting a poll deletion request. action=deletepoll&pollid=SELECT 2822 FROM SELECTSLEEP5gsJu...

CVE-2013-1401: Improper Neutralization of Special Elements used in an SQL Command

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

PT-2020-7347

Name of the Vulnerable Software and Affected Versions: WordPress Poll Plugin version 34.5 Description: The issue concerns security bypass vulnerabilities in specific functions of the WordPress Poll Plugin, including editAnswer, deleteAnswer, addAnswer, and deletePoll. These vulnerabilities allow ...