Lucene search

K

Wordpress Poll Security Vulnerabilities

cve
cve

CVE-2020-24315

Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database.

7.5CVSS

7.6AI Score

0.002EPSS

2020-08-26 02:15 PM
23