Cardozatechnologies Wordpress Poll vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cardozatechnologies Wordpress Poll, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2013-1400cardozatechnologieswordpress_poll+1
EPSS score
3.18%
Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or poll_id parameter in a viewPollResults or userlogs action.9.8CVE-2013-1401cardozatechnologieswordpress_poll+1
EPSS score
4.97%
Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll.