Lucene search
WPScanCVELIST:CVE-2021-24483HistoryAug 02, 2021 - 10:32 a.m.
CVE-2021-24483 Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
2021-08-0210:32:22
CWE-89
WPScan
www.cve.org
4
cve-2021-24483
poll maker
sql injection
authenticated
wordpress plugin
admin dashboard
EPSS
0.001
Percentile
36.7%
The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
CNA Affected
[
{
"product": "Poll Maker",
"vendor": "Ays Pro",
"versions": [
{
"lessThan": "3.2.1",
"status": "affected",
"version": "3.2.1",
"versionType": "custom"
}
]
}
]Related
cnvd
cnvd
WordPress Poll Maker Plugin SQL Injection Vulnerability
2021-08-05 00:00:00
cve
cve
CVE-2021-24483
2021-08-02 11:15:10
patchstack
patchstack
nvd
nvd
CVE-2021-24483
2021-08-02 11:15:10
wpexploit
wpexploit
Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
2021-06-29 00:00:00
prion
prion
Sql injection
2021-08-02 11:15:00
wpvulndb
wpvulndb
Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
2021-06-29 00:00:00