Input validation vulnerability in Poll Maker – Versus Polls, Anonymous Polls, Image Polls 5.6.5

The Poll Maker plugin for WordPress has a security flaw that makes it vulnerable to a type of attack called SQL Injection. This flaw exists in versions up to and including 5.6.5. Basically, the plugin doesn’t properly protect against certain types of malicious code that can be added to the plugin’s settings. This can be done by someone who has administrator-level access or higher to the WordPress site. This attack can potentially expose sensitive information from the website’s database.