CVE

CVE-2021-24442

9.8

CVSS

Description

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks

Attack Vector

Privileges Req.

User Interaction

poll, survey, questionnaire and voting system

Updated Sep 26, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~1 minutes

CVE-2021-24442 Scanner

Targets the 'date_answers[]' POST parameter in the Polls Widget plugin. An attacker can inject arbitrary SQL to extract or modify database contents.

Used 3k times · 4.3k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

CVE history: poll, survey, questionnaire and voting system

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →