CVE-2025-26971

CVE-2025-26971 is an Authenticated SQL Injection in the Poll Maker WordPress plugin. Affected: Poll Maker versions 5.6.5 and earlier. Root cause: improper neutralization of input in an SQL command. Impact: potential unauthorized data access/ manipulation (high severity per CVSS metrics in the ent...

CVE-2024-9462

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scripting via poll settings in all versions up to, and including, 5.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...