High severity8.2NVD Advisory· Published May 10, 2026· Updated May 12, 2026

CVE-2021-47941

Description

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Survey And Pollllm-fuzzy
Range: =1.5.7.3
Package: https://wordpress.org/plugins/wp-survey-and-poll

Patches

Vulnerability mechanics

References

modalsurvey.pantherius.comnvd
www.exploit-db.com/exploits/50269nvd
www.vulncheck.com/advisories/wordpress-plugin-survey-poll-sql-injection-via-sss-paramsnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000