/Vulnerability Library

WordPress TS Poll < 2.4.0 - SQL Injection

CVE-2024-8625
Verified

Description

WordPress TS Poll plugin < 2.4.0 contains a SQL injection caused by lack of sanitization and escaping of a parameter before using it in a SQL statement, letting attackers perform SQL injection attacks, exploit requires admin privileges.

Severity

High

CVSS Score

7.2

Exploit Probability

2%

Affected Product

ts_poll

Published Date

February 18, 2026

Template Author

riteshs4hu

CVE-2024-8625.yaml
7.2Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2024-8625
CWE ID:
cwe-89

References

https://wpscan.com/vulnerability/ab4d7065-4ea2-4233-9593-0f540f91f45e/https://nvd.nist.gov/vuln/detail/CVE-2024-8625

Remediation Steps

Update to version 2.4.0 or later.