Survey Maker – Best WordPress Survey Plugin, CVE-2021-24459

CVE, Research URL: CVE-2021-24459
Home page URL: Security reports for Survey Maker – Best WordPress Survey Plugin
Application: Survey Maker – Best WordPress Survey Plugin
Published on: Aug 02, 2021
Research Description: The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Affected versions: Min -, max 3.1.2.
Status: vulnerable

Survey Maker &#8211; Best WordPress Survey Plugin, CVE-2021-24459