https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-24315.htmlhttps://patchthecve.com/cve/CVE-2020-24315.htmlWed, 17 Jun 2026 03:05:22 +0000HIGH 7.5: Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database.https://patchthecve.com/cve/CVE-2013-1401.htmlhttps://patchthecve.com/cve/CVE-2013-1401.htmlTue, 16 Jun 2026 23:51:22 +0000CRITICAL 9.8: Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll.https://patchthecve.com/cve/CVE-2013-1400.htmlhttps://patchthecve.com/cve/CVE-2013-1400.htmlTue, 16 Jun 2026 23:51:22 +0000CRITICAL 9.8: Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL commands via the pollid or poll_id parameter in a viewPollResults or userlogs action.