Not rated
CVE-2021-24483 The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did…
Description
The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Poll Maker 3.2 | earliest → < 3.2.1 | 3.2.1 |
Other CVEs of Poll Maker
The 9 CVEs of Poll Maker →
CVE-2025-57954
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Poll Maker…
6.5
Medium
CVE-2025-47545
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro…
5.3
Medium
CVE-2025-24577
Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access…
6.5
Medium
CVE-2025-26971
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Poll Maker…
7.6
High