Lucene search
K

2114 matches found

Cvelist
Cvelist
added 2025/11/13 9:24 a.m.7 views

CVE-2025-64370 WordPress YOP Poll plugin <= 6.5.38 - Broken Access Control vulnerability

Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YOP Poll: from n/a through = 6.5.38...

5.3CVSS0.00189EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 9:24 a.m.1 views

CVE-2025-64370 WordPress YOP Poll plugin <= 6.5.38 - Broken Access Control vulnerability

Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YOP Poll: from n/a through = 6.5.38...

5.3CVSS6.6AI score0.00189EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/13 6:30 a.m.9 views

EUVD-2025-152756

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

4.9CVSS6AI score0.0026EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/11/13 5:30 a.m.7 views

CVE-2025-12620 Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

4.9CVSS0.0026EPSS
Exploits0References3
CVE
CVE
added 2025/11/13 5:30 a.m.17 views

CVE-2025-12620

CVE-2025-12620 affects the WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls (versions up to and including 6.0.7). The root cause is insufficient escaping and inadequate preparation of the SQL query used with the filterbyauthor parameter, enabling an authenticated attacker ...

4.9CVSS6.1AI score0.0026EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/13 5:30 a.m.3 views

CVE-2025-12620 Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the ‘filterbyauthor’ parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on...

4.9CVSS6.1AI score0.0026EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.7 views

PT-2025-46784

Name of the Vulnerable Software and Affected Versions The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress versions through 6.0.7 Description The software is susceptible to a SQL Injection issue due to inadequate input sanitization and query preparation. Specifically,...

4.9CVSS7AI score0.0026EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.3 views

WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.9CVSS7.4AI score0.0026EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.4 views

PT-2025-46811

Name of the Vulnerable Software and Affected Versions YOP Poll versions through 6.5.38 Description An authorization issue exists in YOP Poll, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update YOP Poll to a version later than 6.5.38...

5.3CVSS6.6AI score0.00189EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.2 views

WordPress plugin YOP Poll 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00189EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/12 11:36 p.m.8 views

WordPress Poll Maker plugin <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter vulnerability

Authenticated Administrator+ SQL Injection via filterbyauthor Parameter vulnerability discovered by type5afe in WordPress Plugin Poll Maker versions = 6.0.7...

4.9CVSS7.8AI score0.0026EPSS
Exploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:47 p.m.2 views

Malicious code in nokire-rara59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b785033d4fd6c80b83535d18216bdf2bd406db3f9dd9077afe28614de7dc6a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
RedHat Linux
RedHat Linux
added 2025/11/11 8:21 a.m.4 views

kernel: acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

5.5CVSS6.8AI score0.00177EPSS
Exploits0References5
Redos
Redos
added 2025/11/11 12:0 a.m.4 views

ROS-20251111-03

Vulnerability of mlx5 driver Poll Mode Driver of DPDK package is related to incorrect data processing when working with Mellanox network devices. with Mellanox network devices. Exploitation of the vulnerability could allow an attacker, remotely to cause information disclosure or denial of service...

6.5CVSS6AI score0.00278EPSS
Exploits0
Redos
Redos
added 2025/11/11 12:0 a.m.4 views

ROS-20251111-04

Vulnerability of mlx5 driver Poll Mode Driver of DPDK package is related to incorrect data processing when working with Mellanox network devices. with Mellanox network devices. Exploitation of the vulnerability could allow an attacker, remotely to cause information disclosure or denial of service...

6.5CVSS6AI score0.00278EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/11/07 5:32 p.m.4 views

CVE-2025-62040

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through = 6.5.37...

7.1CVSS6.4AI score0.00244EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/06 6:32 p.m.2 views

EUVD-2025-38081

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through = 6.5.37...

7.1CVSS5.9AI score0.00244EPSS
Exploits0References2
NVD
NVD
added 2025/11/06 4:16 p.m.9 views

CVE-2025-62040

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through = 6.5.37...

7.1CVSS0.00244EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:55 p.m.1 views

CVE-2025-62040 WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through = 6.5.37...

7.1CVSS6AI score0.00244EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/06 3:55 p.m.5 views

CVE-2025-62040 WordPress YOP Poll plugin <= 6.5.37 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YOP YOP Poll yop-poll.This issue affects YOP Poll: from n/a through = 6.5.37...

7.1CVSS0.00244EPSS
Exploits0References1
Rows per page
Query Builder