CVE-2013-1401: 
WordPress vulnerability analysis and mitigation

Multiple security bypass vulnerabilities were identified in WordPress Poll Plugin version 34.5 for WordPress, specifically affecting the editAnswer, deleteAnswer, addAnswer, and deletePoll functions. The vulnerability was assigned CVE-2013-1401 and allows remote attackers to manipulate poll data by adding, editing, and deleting answers and polls without proper authorization (NVD, CVE).

The vulnerability received a CVSS v3.1 Base Score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a critical severity level. The vulnerability is classified under CWE-89 (SQL Injection), suggesting improper neutralization of special elements used in SQL commands (NVD).

The vulnerability allows unauthorized remote attackers to manipulate poll data by adding, editing, and deleting answers, as well as deleting entire polls. This can lead to unauthorized modification of poll results and potential data manipulation (NVD).

Users should upgrade to WordPress Poll Plugin version 34.06 or later which addresses these security bypass vulnerabilities (Wordfence).