CVE-2021-24442

PoC ×2—

CVSS 3.1

9.8 critical

EPSS

46%p99

Published

Jul 12, 2021 (Jul 12, 2021)

Modified

Jun 17, 2026

Description

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks

Vendors: wpdevart
Products: poll\, survey\, questionnaire and voting system
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (46.0%)

In the news0 stories

No ingested article mentions this CVE yet.