110 matches found
WordPress YOP Poll plugin <= 6.2.7 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Toby Jackson in WordPress YOP Poll plugin versions = 6.2.7. Solution Update the WordPress YOP Poll plugin to the latest available version at least 6.2.8...
CVE-2020-24315
Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database...
CVE-2020-24315
Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database...
Design/Logic Flaw
Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database...
CVE-2020-24315
CVE-2020-24315 affects the Vinoj Cardoza WordPress Poll Plugin (versions prior to 37). The root cause is missing input escaping on the pollid POST parameter, allowing an attacker to craft SQL statements that can dump the target database. Impact noted across sources as an SQL injection with potent...
PT-2020-15680 · Vinoj Cardoza · Vinoj Cardoza Wordpress Poll Plugin
Name of the Vulnerable Software and Affected Versions: Vinoj Cardoza WordPress Poll Plugin versions prior to v37 Description: The issue allows users to execute SQL statements by crafting specific input, potentially leading to the dumping of the entire target's database. This is due to a lack of...
CVE-2013-1401
Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...
Sql injection
Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or pollid parameter in a viewPollResults or userlogs action...
Security feature bypass
Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...
CVE-2013-1401
Cardoza WordPress Poll plugin for WordPress (versions around 34.05/34.5) contains multiple vulnerable functions (editAnswer, deleteAnswer, addAnswer, deletePoll) that can be reached via external AJAX calls. The issues enable remote attackers to manipulate polls (add/edit/delete answers, delete po...
CVE-2013-1401
Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...
CVE-2013-1400
CVE-2013-1400 affects Cardoza WordPress Poll plugin (34.05) / Cardoza WordPress Poll plugin 34.05. The vulnerability is in CWPPoll.js (viewPollResults and userlogs) where the poll_id pollid parameter is not sanitized, allowing remote SQL injections. This can enable manipulation of backend data or...
CVE-2013-1400
Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or pollid parameter in a viewPollResults or userlogs action...
WordPress democracy-poll plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. democracy-poll is an online poll plugin used in it. A cross-site request forgery vulnerability exists in the WordPress democracy-poll...
CVE-2019-9914
The yop-poll plugin before 6.0.3 for WordPress has wp-admin/admin.php?page=yop-polls&action=view-votes pollid XSS...
WordPress Survey And Poll 1.5.7.3 SQL Injection
Exploit Title: Wordpress Plugin Survey & Poll 1.5.7.3 - 'sssparams' SQL Injection Date: 2018-09-09 Exploit Author: Ceylan Bozogullarindan Vendor Homepage: http://modalsurvey.pantherius.com/ Software Link: https://downloads.wordpress.org/plugin/wp-survey-and-poll.zip Version: 1.5.7.3 Tested on:...
WordPress Plugin Simply Poll SQL Injection Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the pollid parameter of the Simply Poll admin-ajax.php page of the...
WordPress Simply Poll Plugin <= 1.4.1 - SQL Injection
This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit other vulnerabilities in the underlying database. Solution Update the plugin to the latest plugin version...
