WordPress Plugin Vulnerabilities

WP Polls < 2.72 - SQL Injection

Description

The WP-Polls WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-polls
Fixed in 2.72

References

CVE
CVE-2015-9352

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
08b65ce7-ac23-47c8-9185-8ad63333fd52

Timeline

Publicly Published
2015-12-15 (about 8 years ago)
Added
2019-08-27 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2022-01-07
Title
Paid Memberships Pro < 2.6.7 - Unauthenticated Blind SQL Injection
Published
2023-05-22
Title
Contact Form Entries < 1.3.1 - SQL Injection
Published
2014-09-07
Title
Spider Facebook < 1.0.10 - Authenticated SQL Injection
Published
2014-08-01
Title
Mingle Forum 1.0.33.3 - wpf.class.php Multiple Parameter SQL Injection
Published
2014-08-01
Title
Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit