CVE-2021-47941

HIGH

WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss_params

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-47941 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 11, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Survey & Poll

Browse Modalsurvey / Survey & Poll
CVE List1.5.7.3affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Survey & Poll 1.5.7.3 - 'sss_params' SQL Injection (2)ExploitDB exploitby Mohin ParamasivamNot analyzed1 file
ExploitDB
PoC details

References

4