CVE-2013-1400

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or poll_id parameter in a viewPollResults or userlogs action.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-02-13

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Wordpress Poll (Cardozatechnologies)

References

• http://www.securityfocus.com/bid/57479
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81466
• https://www.securityfocus.com/archive/1/525370