Lucene search
+L

2170 matches found

WPVulnDB
WPVulnDB
added 2023/11/23 12:0 a.m.11 views

YOP Poll < 6.5.29 - Reusable Captcha via validateImage

Description The YOP Poll plugin for WordPress is vulnerable to captcha bypass due to a reusable captcha bypass in the validateImage function in all versions up to, and including, 6.5.28. This makes it possible for unauthenticated attackers to vote multiple times using the same captcha image...

7.1AI score0.00405EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2023/11/14 7:15 a.m.26 views

CVE-2023-6109

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

5.3CVSS0.00376EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/14 7:15 a.m.6 views

CVE-2023-6109

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

3.7CVSS5.8AI score0.00376EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/14 7:15 a.m.24 views

Race condition

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

2.6CVSS6.9AI score0.00376EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/14 6:39 a.m.9 views

CVE-2023-6109 YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

5.3CVSS6.6AI score0.00376EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/14 6:39 a.m.67 views

CVE-2023-6109

CVE-2023-6109 (YOP Poll) is a race-condition vulnerability in the WordPress YOP Poll plugin. The issue affects all versions up to and including 6.5.26 and stems from improper restrictions on the add() function, enabling unauthenticated attackers to place multiple votes on a single poll, even when...

5.3CVSS4.3AI score0.00376EPSS
SaveExploits0References2Affected Software1
WPVulnDB
WPVulnDB
added 2023/11/14 12:0 a.m.22 views

YOP Poll < 6.5.27 - Unauthenticated Vote Manipulation via Race Condition

Description The plugin is affected by a race condition, allowing unauthenticated users to vote multiple times on a poll even when it's configured to only allow one vote per person...

5.3CVSS7.1AI score0.00376EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.7 views

WordPress Plugin YOP Poll Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.8AI score0.00376EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/11/14 12:0 a.m.14 views

WordPress YOP Poll Plugin <= 6.5.26 is vulnerable to Race Condition

Software YOP Poll Type Plugin Vulnerable versions = 6.5.26 Fixed in 6.5.27 OWASP Top 10 A4: Insecure Design Classification Race Condition CVE CVE-2023-6109 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9ac55c7b49fd Credits RIN MIYACHI Required privilege Unauthenticated...

5.3CVSS6.5AI score0.00376EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/11/13 3:15 a.m.25 views

CVE-2023-34013

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

7.5CVSS0.00445EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/13 3:15 a.m.4 views

CVE-2023-34013

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

7.5CVSS7.3AI score0.00445EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/13 3:15 a.m.33 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

5CVSS7.1AI score0.00445EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/13 2:28 a.m.105 views

CVE-2023-34013

CVE-2023-34013 affects Poll Maker – Best WordPress Poll Plugin (versions

7.5CVSS7.8AI score0.00445EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/13 2:28 a.m.15 views

CVE-2023-34013 WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

4.4CVSS6.9AI score0.00445EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/13 2:28 a.m.41 views

CVE-2023-34013 WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

4.4CVSS7.8AI score0.00445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/13 12:0 a.m.5 views

PT-2023-32522 · WordPress · Yop Poll

Name of the Vulnerable Software and Affected Versions: YOP Poll plugin for WordPress versions up to, and including, 6.5.26 Description: The issue is due to a race condition caused by improper restrictions on the add function. This allows unauthenticated attackers to place multiple votes on a sing...

5.3CVSS5.3AI score0.00376EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/11/13 12:0 a.m.4 views

WordPress Plugin Poll Maker - Best WordPress Poll Plugin Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.5CVSS6.4AI score0.00445EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/11/13 12:0 a.m.7 views

PT-2023-24632 · WordPress · The Poll Maker – Best Wordpress Poll Plugin

Name of the Vulnerable Software and Affected Versions: Poll Maker – Best WordPress Poll Plugin versions 4.6.2 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker can potentially force the server to make unintended requests, leading to...

7.5CVSS7.8AI score0.00445EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/07 12:0 a.m.14 views

PT-2025-8278 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue in the Linux kernel has been identified, specifically in the unix dgram peer wake me function. The unix dgram poll function calls unix dgram peer wake me without...

8.2CVSS6.6AI score0.92621EPSS
SaveExploits28References681
Patchstack
Patchstack
added 2023/10/24 12:0 a.m.20 views

WordPress YOP Poll Plugin <= 6.5.28 is vulnerable to Broken Authentication

Software YOP Poll Type Plugin Vulnerable versions = 6.5.28 Fixed in 6.5.29 OWASP Top 10 A5: Security Misconfiguration Classification Broken Authentication CVE CVE-2023-46611 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f8c5b7c225ab Credits qilin99 Required privilege...

6.6AI score0.00405EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder