Lucene search
+L

2213 matches found

NVD
NVD
added 2024/12/13 3:15 p.m.14 views

CVE-2024-54276

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devfelixmoira Poll Builder poll-builder allows Stored XSS.This issue affects Poll Builder: from n/a through = 1.3.5...

6.5CVSS0.00392EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.7 views

CVE-2023-36531

Missing Authorization vulnerability in liquidpoll LiquidPoll wp-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll: from n/a through = 3.3.68...

4.3CVSS5.8AI score0.01026EPSS
SaveExploits1References3
CVE
CVE
added 2024/12/13 2:24 p.m.40 views

CVE-2024-54276

CVE-2024-54276 is a stored XSS in the Poll Builder (WordPress plugin) used forPolls; the affected range is Poll Builder up to version 1.3.5 (no fixed patch documented in provided sources). The vulnerability arises from improper neutralization during web page generation, enabling stored script exe...

6.5CVSS7.2AI score0.00392EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:24 p.m.24 views

CVE-2024-54276 WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devfelixmoira Poll Builder poll-builder allows Stored XSS.This issue affects Poll Builder: from n/a through = 1.3.5...

6.5CVSS0.00392EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:24 p.m.6 views

CVE-2024-54276 WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Felix Moira Poll Builder allows Stored XSS.This issue affects Poll Builder: from n/a through 1.3.5...

6.5CVSS6.8AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.8 views

WordPress plugin Poll Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS8.1AI score0.00392EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/11 3:59 p.m.7 views

WordPress Poll Builder plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Poll Builder versions = 1.3.5...

6.5CVSS6.1AI score0.00392EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/12/09 1:15 p.m.35 views

CVE-2023-50904

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 4.8.0...

5.3CVSS0.00659EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.6 views

CVE-2023-50904

Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through 4.8.0...

5.3CVSS5.8AI score0.00659EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.15 views

CVE-2023-27449

Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through 4.8.6...

6.3CVSS0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.8 views

CVE-2023-27449 WordPress Total Poll Lite plugin <= 4.8.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through 4.8.6...

6.3CVSS8AI score0.0038EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/09 11:31 a.m.41 views

CVE-2023-27449

CVE-2023-27449: WordPress Total Poll Lite plugin &lt;= 4.8.6 suffers a Missing Authorization (Broken Access Control) vulnerability. The issue allows exploitation due to incorrectly configured access control with a required privilege of Subscriber. A fix is available in version 4.8.7; upgrading mi...

6.3CVSS8AI score0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:29 a.m.9 views

CVE-2023-50904 WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 4.8.0...

5.3CVSS8.5AI score0.00659EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/09 11:29 a.m.22 views

CVE-2023-50904 WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 4.8.0...

5.3CVSS0.00659EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.8 views

WordPress plugin Poll Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS8.7AI score0.00659EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.6 views

PT-2024-12131 · Unknown · Total Poll Lite

Name of the Vulnerable Software and Affected Versions: Total Poll Lite versions through 4.8.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 4.8.6,...

6.3CVSS8.6AI score0.0038EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.6 views

WordPress plugin Total Poll Lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.3CVSS8.1AI score0.0038EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.9 views

PT-2024-14002 · Unknown · Poll Maker

Name of the Vulnerable Software and Affected Versions: Poll Maker versions through 4.8.0 Description: The issue is related to a Missing Authorization vulnerability in Poll Maker, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through...

5.3CVSS9.4AI score0.00659EPSS
SaveExploits0References5
OSV
OSV
added 2024/12/07 2:15 a.m.11 views

CVE-2024-12115

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.4. This is due to missing or incorrect nonce validation on the duplicatepoll function. This makes it possible for unauthenticated...

4.3CVSS5.6AI score0.00153EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/07 2:15 a.m.36 views

CVE-2024-12115

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.4. This is due to missing or incorrect nonce validation on the duplicatepoll function. This makes it possible for unauthenticated...

4.3CVSS0.00153EPSS
SaveExploits0References2
Rows per page
Query Builder