CVE-2021-47941: Modalsurvey Survey & Poll

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.

Affected products

• Modalsurvey Survey & Poll: version 1.5.7.3 only

Published 2026-05-10. Last modified 2026-07-25.