WordPress Plugin Survey & Poll 1.5.7.3 'sss_params' SQL Injection Vulnerability Summary Vulnerability Overview Vulnerability Type: SQL Injection Vulnerable Component: WordPress Plugin "Survey & Poll" Affected Version: 1.5.7.3 Vulnerable Parameter: Vulnerability ID: EDB-ID: 50269 Publication Date: 2021-09-07 Author: Mohin Paramasivam (Shaddow0u33t) Impact Scope Platform: PHP Database: MariaDB, MySQL Software Link: https://downloads.wordpress.org/plugin/wp-survey-and-poll.zip Exploitation Method: By injecting SQL statements via the parameter, an attacker can extract sensitive data such as database version, current database name, hostname, current user, all databases, table structures, and column information. Remediation Upgrade to a version other than 1.5.7.3 (i.e., versions below 1.5.7.3 or patched versions) Strictly filter and validate input parameters Use parameterized queries or prepared statements to prevent SQL injection POC Code