Sql injection

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or pollid parameter in a viewPollResults or userlogs action...

PT-2020-7346

Name of the Vulnerable Software and Affected Versions: WordPress Poll Plugin version 34.5 Description: The issue allows attackers to execute arbitrary SQL commands via the pollid or poll id parameter in a "viewPollResults" or "userlogs" action. This is made possible by multiple SQL injection...