Lucene search
K

74 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:24 p.m.7 views

CVE-2026-8995

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is due to insufficient access controls on the 'ayspollgetuserinformation' AJAX action, which serializes and returns the...

4.3CVSS5.4AI score0.00283EPSS
Exploits0References1
NVD
NVD
added 2026/05/29 4:17 a.m.10 views

CVE-2026-8995

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is due to insufficient access controls on the 'ayspollgetuserinformation' AJAX action, which serializes and returns the...

4.3CVSS0.00283EPSS
Exploits0References9
ATTACKERKB
ATTACKERKB
added 2026/05/29 2:27 a.m.12 views

CVE-2026-8995

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is due to insufficient access controls on the 'ayspollgetuserinformation' AJAX action, which serializes and returns the...

4.3CVSS5.8AI score0.00283EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2026/05/29 2:27 a.m.9 views

CVE-2026-8995 Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is due to insufficient access controls on the 'ayspollgetuserinformation' AJAX action, which serializes and returns the...

4.3CVSS5.8AI score0.00283EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2026/05/29 12:0 a.m.9 views

PT-2026-44746

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7. This is due to insufficient access controls on the 'ays poll get user information' AJAX action, which serializes and returns the...

4.3CVSS5.7AI score0.00283EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.2 views

CVE-2025-68594

Missing Authorization vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from n/a through =...

5.3CVSS5.9AI score0.00283EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.7 views

CVE-2025-68594

The CVE CVE-2025-68594 concerns the Poll, Survey & Quiz Maker Plugin by Opinion Stage for WordPress. It is a Missing Authorization vulnerability (broken access control) affecting the plugin up to version 19.12.0. Wordfence reports the issue in a vulnerability list, noting the CVSS base score of 5...

5.3CVSS5.9AI score0.00283EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/14 5:56 a.m.11 views

CVE-2025-12620

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

4.9CVSS6.6AI score0.0026EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/13 6:30 a.m.4 views

EUVD-2025-152756

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

4.9CVSS6AI score0.0026EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/11/13 5:30 a.m.6 views

CVE-2025-12620 Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

4.9CVSS0.0026EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/13 5:30 a.m.3 views

CVE-2025-12620 Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

4.9CVSS6.1AI score0.0026EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-11395

Malware in sbrugna...

7.2CVSS6.9AI score0.01409EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-38137

Malicious code in bioql PyPI...

7.5CVSS8.2AI score0.00378EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-46362

Malicious code in bioql PyPI...

7.1CVSS7AI score0.0033EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-50607

Malicious code in bioql PyPI...

4.3CVSS8.7AI score0.0015EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/09/22 7:8 p.m.3 views

WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Abu Hurayra in WordPress Plugin Poll Maker versions = 6.0.2...

6.5CVSS6AI score0.00285EPSS
Exploits0Affected Software1
Cvelist
Cvelist
added 2025/09/22 6:24 p.m.9 views

CVE-2025-57954 WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ays Pro Poll Maker poll-maker allows DOM-Based XSS.This issue affects Poll Maker: from n/a through = 6.0.2...

6.5CVSS0.00285EPSS
Exploits0References1
NVD
NVD
added 2025/08/16 3:15 a.m.3 views

CVE-2024-12575

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS0.00255EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/16 2:24 a.m.2 views

CVE-2024-12575 Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 5.8.9 via the 'aysfinishpoll' AJAX action. This makes it possible for unauthenticated attackers to retrieve admin email information...

5.3CVSS6.8AI score0.00255EPSS
Exploits0References2
CVE
CVE
added 2025/08/16 2:24 a.m.13 views

CVE-2024-12575

CVE-2024-12575 relates to the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (≤ 5.8.9). The vulnerability is an unauthenticated basic information exposure exposed via the ajax action ays_finish_poll, allowing attackers to retrieve admin email information from poll respon...

5.3CVSS6.7AI score0.00255EPSS
Exploits0References2
Rows per page
Query Builder