Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Facebook Survey Pro 1.0

  • Severity: critical
  • Status: Open
  • Publication: November 18, 2012

The Facebook Survey Pro plugin for WordPress has a security vulnerability that can be exploited by unauthenticated attackers. This plugin, in versions up to and including version 1.0, has a lack of security precautions in its code. This means that the user supplied parameter has insufficient escaping and the existing SQL query is not sufficiently prepared. This allows attackers to add extra SQL queries to the existing ones, which can be used to gain access to sensitive information stored in the database.

Detected in:

Facebook Survey Pro open vulnerable versions: >= * <= 1.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.