Beveiligingsadvies

CVE-2021-47941

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-10 12:43:58
Laatst bijgewerkt 2026-07-15 01:24:40
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.