Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Modalsurvey Clear all filters
TI-2021-22554 CVE-2021-47941 · GHSA-9h5v-2xjm-9936

WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params

Priority HIGH 77

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00282 Published 2026-05-10 No fix listed CWE-89
TI-2024-12636 CVE-2024-13595 · GHSA-chhf-p5px-2543

Simple Signup Form <= 1.6.5 - Authenticated (Contributor+) SQL Injection

Priority LOW 29

The Simple Signup Form plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'ssf' shortcode in all versions up to, and including, 1.6.5 due to insufficient escaping on the user supplied param…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00389 Published 2025-02-18 No fix listed CWE-89
TI-2024-12637 CVE-2024-13596 · GHSA-vf37-49r4-5wh4

SQL injection in pantherius WordPress Survey & Poll – Quiz, Survey and Poll Plugin for…

Priority LOW 29

The WordPress Survey & Poll – Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'id' attribute of the 'survey' shortcode in all versions up to, and including, 1.7.5 du…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00353 Published 2025-01-30 No fix listed CWE-89