WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress, CVE-2021-47941
- CVE, Research URL
- Home page URL
-
Security reports for WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress
- Published on
- May 10, 2026
- Research Description
- WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.
- Affected versions
-
max 1.5.7.3.
- Status
-
vulnerable