Description
WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Modalsurvey | Survey & Poll | 1.5.7.3 | — |
References
- ExploitDB-50269 exploit
- Official Product Homepage product
- VulnCheck Advisory: WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params third-party-advisory