CVE-2021-24442

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks

• CWE-89

• https://wpscan.com/vulnerability/7376666e-9b2a-4239-b11f-8544435b444aExploit, Third Party Advisory
• https://www.in-spired.xyz/wpdevart-polls-blind-sql-injection/Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/7376666e-9b2a-4239-b11f-8544435b444aExploit, Third Party Advisory
• https://www.in-spired.xyz/wpdevart-polls-blind-sql-injection/Exploit, Third Party Advisory

Published

Jul 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24437The Favicon by RealFaviconGenerator WordPress plugin through…6.1
• CVE-2021-24438The ShareThis Dashboard for Google Analytics WordPress plugi…6.1
• CVE-2021-24439The Browser Screenshots WordPress plugin before 1.7.6 allowe…5.4
• CVE-2021-2444Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2021-24440The Sign-up Sheets WordPress plugin before 1.0.14 did not sa…4.8
• CVE-2021-24441The Sign-up Sheets WordPress plugin before 1.0.14 does not n…8
• CVE-2021-24443The About Me widget of the Youzify – BuddyPress Community, U…5.4
• CVE-2021-24444The TaxoPress – Create and Manage Taxonomies, Tags, Categori…4.8
• CVE-2021-24445The My Site Audit WordPress plugin through 1.2.4 does not sa…5.5
• CVE-2021-24446The Remove Footer Credit WordPress plugin before 1.0.6 does …5.4
• CVE-2021-24447The WP Image Zoom WordPress plugin before 1.47 did not valid…5.3
• CVE-2021-24448The User Registration & User Profile – Profile Builder WordP…4.8