CVE-2013-1400

9.8 criticalEPSS 3.2%

Critical (9.8) in cardozatechnologies wordpress poll. EPSS 3.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or poll_id parameter in a viewPollResults or userlogs action.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-02-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cardozatechnologies:wordpress_poll

References

http://www.securityfocus.com/bid/57479
https://exchange.xforce.ibmcloud.com/vulnerabilities/81466
https://www.securityfocus.com/archive/1/525370
http://www.securityfocus.com/bid/57479
https://exchange.xforce.ibmcloud.com/vulnerabilities/81466

Check your stack JSON