Lucene search
K

10 matches found

NVD
NVD
added 2026/06/15 2:16 p.m.9 views

CVE-2016-20067

WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in...

5.3CVSS0.00116EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-9186

Malware in sbrugna...

6.1CVSS6.3AI score0.00913EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-1166

Malware in sbrugna...

6.1CVSS6.3AI score0.00913EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:57 a.m.5 views

CVE-2015-9346

The cp-polls plugin before 1.0.5 for WordPress has XSS...

6.1CVSS6.9AI score0.00913EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:50 a.m.5 views

CVE-2014-10395

The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list...

6.1CVSS6.2AI score0.00913EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/09/24 12:0 a.m.13 views

WordPress CP Polls Plugin <= 1.0.74 is vulnerable to Cross Site Scripting (XSS)

Software CP Polls Type Plugin Vulnerable versions = 1.0.74 Fixed in 1.0.75 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47297 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bd0fc6118ee8 Credits Muhamad Agil Fachrian Required...

7.1CVSS6.5AI score0.00292EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2023/03/04 10:15 p.m.20 views

Sql injection

A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The attack can be initiated remotely...

7.5CVSS8.1AI score0.00788EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/03/04 10:0 p.m.29 views

CVE-2014-125091 codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection

A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The attack can be initiated remotely...

5.8CVSS10AI score0.00788EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/03/04 12:0 a.m.3 views

Wordpress Plugin cp-polls SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

9.8CVSS6AI score0.00788EPSS
Exploits0References5
Prion
Prion
added 2019/08/27 12:15 p.m.9 views

Design/Logic Flaw

The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list...

4.3CVSS6.3AI score0.00913EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder