WordPress Plugin Vulnerabilities
Cardoza WordPress Poll <= 36 - Authenticated SQL Injection
Description
The Cardoza WordPress Poll plugin was vulnerable to authenticated SQL Injection in the "pollid" POST parameter when submitting a poll deletion request.
Proof of Concept
Affects Plugins
No known fix References
CVE
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
zerodetail & ratherbland
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-08-10 (about 5 years ago)
Added
2020-08-26 (about 5 years ago)
Last Updated
2022-01-17 (about 4 years ago)
WPScan 