VYPR
Critical severity9.8NVD Advisory· Published Feb 13, 2020· Updated Jun 16, 2026

CVE-2013-1400

CVE-2013-1400

Description

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or poll_id parameter in a viewPollResults or userlogs action.

Affected products

2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.