Lucene search
+L

2614 matches found

Prion
Prion
•added 2023/11/14 7:15 a.m.•34 views

Race condition

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

2.6CVSS6.9AI score0.00373EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/14 6:39 a.m.•13 views

CVE-2023-6109 YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

5.3CVSS6.6AI score0.00373EPSS
SaveExploits0References2
CVE
CVE
•added 2023/11/14 6:39 a.m.•85 views

CVE-2023-6109

CVE-2023-6109 (YOP Poll) is a race-condition vulnerability in the WordPress YOP Poll plugin. The issue affects all versions up to and including 6.5.26 and stems from improper restrictions on the add() function, enabling unauthenticated attackers to place multiple votes on a single poll, even when...

5.3CVSS4.3AI score0.00373EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•3 views

CVE-2023-6109: Concurrent Execution using Shared Resource with Improper Synchronization

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

5.3CVSS5.4AI score0.00373EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
•added 2023/11/14 12:00 a.m.•26 views

YOP Poll < 6.5.27 - Unauthenticated Vote Manipulation via Race Condition

Description The plugin is affected by a race condition, allowing unauthenticated users to vote multiple times on a poll even when it's configured to only allow one vote per person...

5.3CVSS7.1AI score0.00373EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•15 views

WordPress Plugin YOP Poll Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.3CVSS6.8AI score0.00373EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•4 views

PT-2024-14745

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc4+ Description The vulnerability is related to the net/mlx5e module in the Linux kernel. It occurs when the metadata index is put in the tracking list before the relevant skb is available in the map, whic...

5.5CVSS5.9AI score0.00235EPSS
SaveExploits0
Patchstack
Patchstack
•added 2023/11/14 12:00 a.m.•23 views

WordPress YOP Poll Plugin <= 6.5.26 is vulnerable to Race Condition

Software YOP Poll Type Plugin Vulnerable versions = 6.5.26 Fixed in 6.5.27 OWASP Top 10 A4: Insecure Design Classification Race Condition CVE CVE-2023-6109 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9ac55c7b49fd Credits RIN MIYACHI Required privilege Unauthenticated...

5.3CVSS6.5AI score0.00373EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/11/13 3:15 a.m.•17 views

CVE-2023-34013

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

7.5CVSS7.3AI score0.00445EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/13 3:15 a.m.•36 views

CVE-2023-34013

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

7.5CVSS0.00445EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/13 3:15 a.m.•40 views

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

5CVSS7.1AI score0.00445EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/13 2:28 a.m.•127 views

CVE-2023-34013

CVE-2023-34013 affects Poll Maker – Best WordPress Poll Plugin (versions

7.5CVSS7.8AI score0.00445EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/13 2:28 a.m.•18 views

CVE-2023-34013 WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

4.4CVSS6.9AI score0.00445EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/11/13 2:28 a.m.•55 views

CVE-2023-34013 WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

4.4CVSS7.8AI score0.00445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/11/13 12:00 a.m.•18 views

PT-2023-24632 · WordPress · The Poll Maker – Best Wordpress Poll Plugin

Name of the Vulnerable Software and Affected Versions: Poll Maker – Best WordPress Poll Plugin versions 4.6.2 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker can potentially force the server to make unintended requests, leading to...

7.5CVSS7.8AI score0.00445EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/11/13 12:00 a.m.•15 views

PT-2023-32522 · WordPress · Yop Poll

Name of the Vulnerable Software and Affected Versions: YOP Poll plugin for WordPress versions up to, and including, 6.5.26 Description: The issue is due to a race condition caused by improper restrictions on the add function. This allows unauthenticated attackers to place multiple votes on a sing...

5.3CVSS5.3AI score0.00373EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/11/13 12:00 a.m.•17 views

WordPress Plugin Poll Maker - Best WordPress Poll Plugin Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.5CVSS6.4AI score0.00445EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/13 12:00 a.m.•10 views

CVE-2023-34013: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

7.5CVSS7.5AI score0.00445EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•25 views

PT-2025-8278

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data-race issue in the Linux kernel has been identified, specifically in the unix dgram peer wake me function. The unix dgram poll function calls unix dgram peer wake me without holdin...

7.8CVSS6.3AI score0.00279EPSS
SaveExploits0References492
Patchstack
Patchstack
•added 2023/10/24 12:00 a.m.•28 views

WordPress YOP Poll Plugin <= 6.5.28 is vulnerable to Broken Authentication

Software YOP Poll Type Plugin Vulnerable versions = 6.5.28 Fixed in 6.5.29 OWASP Top 10 A5: Security Misconfiguration Classification Broken Authentication CVE CVE-2023-46611 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID f8c5b7c225ab Credits qilin99 Required privilege...

6.6AI score0.0042EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder