Vulnerabilities

TI-2024-08001 CVE-2024-8625 · GHSA-jqhv-47hf-83hh

TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

HIGH 67

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02323 Published 2024-10-21 Fixed in 2.4.0 CWE-89

TI-2024-08375 CVE-2024-9022 · GHSA-6h29-g2x6-h6hg

SQL injection in totalsoft TS Poll – Survey, Versus Poll, Image Poll, Video Poll

HIGH 67

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.4.0 due to insufficient escaping on the us…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00967 Published 2024-10-10 No fix listed CWE-89

Vulnerabilities

Filters

TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

SQL injection in totalsoft TS Poll – Survey, Versus Poll, Image Poll, Video Poll