Lucene search
+L

300 matches found

CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•18 views

WordPress plugin Poll Maker has a vulnerability related to concurrency issues.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A competitive...

8.1CVSS8.3AI score0.00353EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•11 views

CVE-2025-47545: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Ays Pro Poll Maker poll-maker allows Leveraging Race Conditions.This issue affects Poll Maker: from n/a through = 5.7.7...

8.1CVSS5.8AI score0.00353EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•19 views

PT-2025-20158 · Unknown · Ays Pro Poll Maker

Name of the Vulnerable Software and Affected Versions: Ays Pro Poll Maker versions n/a through 5.7.7 Description: The issue is related to a 'Race Condition' vulnerability, which occurs due to concurrent execution using shared resources with improper synchronization. This allows for leveraging rac...

8.1CVSS8.4AI score0.00353EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/04/25 11:48 p.m.•22 views

CVE-2025-24577

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

9.8CVSS5.9AI score0.0043EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/04/17 4:15 p.m.•19 views

CVE-2025-24577

Missing Authorization vulnerability in Ays Pro Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Poll Maker: from n/a through 5.5.0...

9.8CVSS5.8AI score0.0043EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•21 views

CVE-2025-24577

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

9.8CVSS0.0043EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/17 3:48 p.m.•35 views

CVE-2025-24577 WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

6.5CVSS0.0043EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:48 p.m.•19 views

CVE-2025-24577 WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

6.5CVSS5.9AI score0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•16 views

WordPress plugin Poll Maker has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.7AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•20 views

PT-2025-17033 · Unknown · Ays Pro Poll Maker

Name of the Vulnerable Software and Affected Versions: Ays Pro Poll Maker versions through 5.5.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.5.0,...

9.8CVSS6.4AI score0.0043EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•8 views

CVE-2025-24577: Missing Authorization

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

9.8CVSS5.9AI score0.0043EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/18 8:39 a.m.•23 views

WordPress Poll Maker plugin < 5.5.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Poll Maker versions 5.5.4...

4.8CVSS8AI score0.00267EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/18 6:25 a.m.•31 views

CVE-2024-13602

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00267EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/16 6:15 a.m.•44 views

CVE-2024-13602

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00267EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/16 6:15 a.m.•23 views

CVE-2024-13602

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00267EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/16 6:00 a.m.•44 views

CVE-2024-13602 Poll Maker < 5.5.4 - Admin+ Stored XSS

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

0.00267EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/16 6:00 a.m.•16 views

CVE-2024-13602 Poll Maker < 5.5.4 - Admin+ Stored XSS

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.4AI score0.00267EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/16 12:00 a.m.•21 views

WordPress plugin Poll Maker has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS8.3AI score0.00267EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/03/16 12:00 a.m.•6 views

PT-2025-11380

Name of the Vulnerable Software and Affected Versions The Poll Maker WordPress plugin versions prior to 5.5.4 Description The issue concerns the Poll Maker WordPress plugin, which does not properly sanitise and escape some of its settings. This could allow high-privilege users, such as...

4.8CVSS0.00267EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/16 12:00 a.m.•12 views

CVE-2024-13602: Improper Neutralization of Input During Web Page Generation

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.9AI score0.00267EPSS
SaveExploits1References1
Rows per page
Query Builder