Wp Survey And Poll Vulnerabilities

The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection in version 1.5.7.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers...

CVSS:

7.5

Affected:

up to 1.5.7.3

Fix:

No patched version reported

Disclosed:

May 10, 2026

CVE-2021-47941 on NVD →

The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'survey' shortcode in all versions up to, and including, 1.7.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVSS:

6.5

Affected:

up to 1.7.5

Fix:

No patched version reported

Disclosed:

Jan 30, 2025

CVE-2024-13596 on NVD →

The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsurveypoll_results' shortcode in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping on user supplied attributes....

CVSS:

6.4

Affected:

up to 1.7.5

Fix:

No patched version reported

Disclosed:

Jan 6, 2025

CVE-2024-12528 on NVD →

SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the survey_id parameter in an ajax_survey action to wp-admin/admin-ajax.php.

CVSS:

9.8

Affected:

up to 1.2

Fixed in:

1.2

Disclosed:

May 28, 2015

CVE-2015-2090 on NVD →