Vulnerability · Published Oct 26, 2024 · Assigned by Wordfence
CVE-2024-9475Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
Medium 4.9
In plain English
A medium-severity SQL injection in Poll Maker – Versus Polls, Anonymous Polls, Image Polls from ays-pro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Official description
The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the order_by parameter in all versions up to, and including, 5.4.6 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level permissions and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ays-pro | Poll Maker – Versus Polls, Anonymous Polls, Image Polls | 0 – through 5.4.6 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N