SQL Injection Vulnerability in WordPress Survey & Poll Plugin

CVE-2024-13596

What is CVE-2024-13596?

The Survey & Poll – Quiz, Survey and Poll Plugin for WordPress is susceptible to SQL Injection through the 'id' attribute of the 'survey' shortcode due to inadequate escaping of user-supplied input. This vulnerability allows authenticated attackers with Contributor-level access or higher to manipulate existing SQL queries, potentially leading to data extraction and exposing sensitive database information. It affects all versions of the plugin up to and inclusive of 1.7.5, making it essential for users to update to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References