WP Poll Maker < 3.4 - Authenticated (Subscriber+) Arbitrary File Deletion

Description The WP Poll Maker – Best WordPress Poll Plugin for Voting Contest plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the itepollthemeactionuninstall function and insufficient file path validation in all versions up to, and including, 3.1...

PT-2024-23882 · WordPress · Wp Poll Maker

Name of the Vulnerable Software and Affected Versions: WP Poll Maker versions prior to 3.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This allows for potential unauthorized access to files...

WordPress Plugin WP Poll Maker 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A path traversal vulnerability exis...

WordPress WP Poll Maker plugin <= 3.1 - Subscriber+ Arbitrary File Deletion vulnerability

Subscriber+ Arbitrary File Deletion vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin WP Poll Maker versions = 3.1...

WordPress WP Poll Maker Plugin <= 3.1 is vulnerable to Arbitrary File Deletion

Software WP Poll Maker Type Plugin Vulnerable versions = 3.1 Fixed in 3.4 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-31240 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 371f80c25178 Credits Yudistira Arya Required privile...

WP Poll Maker < 3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings

Description The WP Poll Maker – Best WordPress Poll Plugin for Voting Contest plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-29818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

CVE-2024-29818

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

CVE-2024-29818

CVE-2024-29818 – Stored XSS in WP Poll Maker (Poll Maker & Voting Plugin) for WordPress. Root cause: Improper neutralization of input during web page generation (Cross-site Scripting). Affected: WP Poll Maker versions from n/a through 3.1. The connected Red Hat entry repeats the same description;...

CVE-2024-29818 WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Poll Maker & Voting Plugin Team InfoTheme WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a through 3.1...

WordPress Plugin WP Poll Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23064 · WordPress · Wp Poll Maker

Name of the Vulnerable Software and Affected Versions: WP Poll Maker versions 3.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS attacks. Recommendations: For WP Poll...

WordPress WP Poll Maker Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Poll Maker Type Plugin Vulnerable versions = 3.1 Fixed in 3.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29818 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bde676e2b02e Credits Dhabaleshwar Das Required privilege...

WordPress Poll Maker Plugin <= 4.8.0 is vulnerable to Broken Access Control

Software Poll Maker Type Plugin Vulnerable versions = 4.8.0 Fixed in 4.8.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-50904 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID acddbd8f12ba Credits Abdi Pranata Required...

Poll Maker < 4.7.2 - Missing Authorization

Description The Poll Maker plugin for WordPress is vulnerable to unauthorized access of data or functionality due to a missing capability check on one of its functions in all versions up to, and including, 4.7.1. This makes it possible for unauthenticated attackers to make use of this function...

CVE-2023-34013

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

CVE-2023-34013

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...

CVE-2023-34013 WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2...