CVE-2021-24442 Scanner

WordPress Polls Widget is a popular plugin that allows website owners to create interactive polls and surveys to boost user engagement. It is commonly used by marketers, bloggers, and site administrators to collect feedback and opinions from visitors. The plugin integrates seamlessly with WordPress, offering customizable poll designs and real-time results. Its widespread adoption makes it a critical component for many sites, but also a prime target for attackers seeking to exploit vulnerabilities.

SQL Injection (SQLi) is a severe security flaw that occurs when user-supplied input is improperly sanitized before being used in database queries. In this case, the vulnerability arises because the plugin fails to validate or escape the 'date_answers[]' POST parameter. This allows an attacker to inject malicious SQL commands, potentially compromising the entire database. The flaw is classified as a critical issue due to its high impact and ease of exploitation.

The vulnerable endpoint is the poll submission handler, where the 'date_answers[]' parameter is processed. This parameter is directly concatenated into SQL queries without any sanitization, prepared statements, or parameterized queries. An attacker can craft a specially designed HTTP POST request containing SQL code in the 'date_answers[]' field, which then executes against the WordPress database. This technique can be used to bypass authentication, extract sensitive data, or even modify database records.

If successfully exploited, an attacker could gain unauthorized access to the WordPress database, leading to data theft, privilege escalation, or complete site takeover. Sensitive information such as user credentials, personal data, and site configurations could be exposed. Additionally, the attacker might inject malicious content or backdoors, compromising the site's integrity and reputation. Given the CVSS score of 9.8, immediate remediation is critical to prevent severe damage.