WordPress Plugin Vulnerabilities

Cardoza WordPress poll - Multiple SQL Injection Vulnerabilities

Description

The WordPress Poll WordPress plugin was affected by a Multiple SQL Injection Vulnerabilities security vulnerability.

Affects Plugins

Plugin icon
cardoza-wordpress-poll
Fixed in 33.6

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
6bb364b1-662b-4d81-ab6e-557bc04f865a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-11-14
Title
WP Project Manager < 2.6.27 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'
Published
2014-08-01
Title
Advertizer <= 1.0 - SQL Injection
Published
2014-08-01
Title
Easy Contact Form Lite <= 1.0.7 - SQL Injection
Published
2025-03-25
Title
Navigation Tree Elementor <= 1.0.1 - Authenticated (Subscriber+) SQL Injection
Published
2026-01-16
Title
Antideo Email Validator < 1.0.11 - Unauthenticated SQL Injection