CVE-2015-2090
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 4.7%
from disclosure to weapon0 days
Published on NVDFeb 26
1st PoCFeb 11
exploitation probability
4.7%top 9% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the survey_id parameter in an ajax_survey action to wp-admin/admin-ajax.php.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/36054unverifiedcve_referencepacketstormsecurity.com/files/130381/WordPress-Survey-And-Poll-1.1.7-Blind-SQL-Injection.htmlunverifiedcve_referencewww.exploit-db.com/exploits/36054unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.