Input validation vulnerability in TS Poll – Survey, Versus Poll, Image Poll, Video Poll 2.3.9

A plugin called TS Poll, used for creating surveys, polls, images, and videos on WordPress websites, has a security flaw that makes it vulnerable to a type of hacking called SQL Injection. This happens when a user enters a specific code into a field called ‘orderby’, which is not properly protected. This could allow someone with high level access to the website, such as an administrator, to add their own code and access sensitive information from the website’s database.