Lucene search
+L

269 matches found

CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•12 views

WordPress plugin Poll Maker 竞争条件问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A competitive...

8.1CVSS8.3AI score0.00328EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•13 views

PT-2025-20158 · Unknown · Ays Pro Poll Maker

Name of the Vulnerable Software and Affected Versions: Ays Pro Poll Maker versions n/a through 5.7.7 Description: The issue is related to a 'Race Condition' vulnerability, which occurs due to concurrent execution using shared resources with improper synchronization. This allows for leveraging rac...

8.1CVSS8.4AI score0.00328EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/04/25 11:48 p.m.•18 views

CVE-2025-24577

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

9.8CVSS5.9AI score0.00423EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/17 4:15 p.m.•14 views

CVE-2025-24577

Missing Authorization vulnerability in Ays Pro Poll Maker allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Poll Maker: from n/a through 5.5.0...

9.8CVSS5.8AI score0.00423EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•16 views

CVE-2025-24577

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

9.8CVSS0.00423EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:48 p.m.•16 views

CVE-2025-24577 WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

6.5CVSS5.9AI score0.00423EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/17 3:48 p.m.•28 views

CVE-2025-24577 WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through = 5.5.0...

6.5CVSS0.00423EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•12 views

PT-2025-17033 · Unknown · Ays Pro Poll Maker

Name of the Vulnerable Software and Affected Versions: Ays Pro Poll Maker versions through 5.5.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.5.0,...

9.8CVSS6.4AI score0.00423EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•10 views

WordPress plugin Poll Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.7AI score0.00423EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/18 8:39 a.m.•12 views

WordPress Poll Maker plugin < 5.5.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Poll Maker versions 5.5.4...

4.8CVSS8AI score0.00262EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/18 6:25 a.m.•26 views

CVE-2024-13602

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00262EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/16 6:15 a.m.•15 views

CVE-2024-13602

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00262EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/16 6:15 a.m.•36 views

CVE-2024-13602

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00262EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/16 6:00 a.m.•14 views

CVE-2024-13602 Poll Maker < 5.5.4 - Admin+ Stored XSS

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.4AI score0.00262EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/16 6:00 a.m.•35 views

CVE-2024-13602 Poll Maker < 5.5.4 - Admin+ Stored XSS

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

0.00262EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/16 12:00 a.m.•14 views

WordPress plugin Poll Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.8CVSS8.3AI score0.00262EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/02/27 2:24 p.m.•19 views

CVE-2025-26971

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through = 5.6.5...

9.8CVSS7.3AI score0.00473EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/25 3:15 p.m.•10 views

CVE-2025-26971

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ays-pro Poll Maker allows Blind SQL Injection. This issue affects Poll Maker: from n/a through 5.6.5...

9.8CVSS7.3AI score0.00473EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/25 3:15 p.m.•22 views

CVE-2025-26971

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through = 5.6.5...

9.8CVSS0.00473EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/25 2:17 p.m.•11 views

CVE-2025-26971 WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through = 5.6.5...

7.6CVSS7.3AI score0.00473EPSS
SaveExploits0References1
Rows per page
Query Builder