CVE-2013-1400: Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow atta...

Security readout for executives and security teams

This CVE describes SQL injection in an old WordPress polling plugin version 34.5. If a site still runs the vulnerable plugin, an attacker may be able to manipulate database queries through poll-related request parameters. The sources do not provide CVSS, confirmed active exploitation, or a vendor fix. Likely exposure is WordPress sites still running WordPress Poll Plugin 34.5 or the Cardoza WordPress poll plugin referenced by Bugtraq. Internet-facing WordPress deployments are the main concern. Product metadata is incomplete, so confirm plugin identity locally before scoping broadly. Prioritize any internet-facing WordPress site still using this plugin. The technical impact is serious, but business urgency depends on whether the obsolete plugin is present. Absence of KEV evidence lowers emergency pressure but not remediation importance. Mitigation focus: Inventory WordPress sites for the polling plugin and exact version.; Check current vendor or maintainer guidance for a fixed or supported replacement.; Disable or remove the plugin where no supported fix is available..

Prepared

Jun 6, 2026, 02:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.