https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:24:01.965360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24651 CVE-2021-24651 — Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection 2026-10-07T08:24:01.981155+00:00

Affected: Unknown Poll Maker

The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not disclosed in the response, it is possible to use a timing attack to exfiltrate data such as password hash.