WordPress wp-polls plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-polls is a plugin used to build a voting system in it. A SQL injection vulnerability exists in the WordPress wp-polls plugin...

WordPress cp-polls plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress cp-polls plugin versions prior to 1.0.1. The vulnerability stems...

WordPress wp-polls plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-polls is a plugin used to build a voting system in it. A cross-site scripting vulnerability exists in WordPress wp-polls plugin...

CVE-2016-10936

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

CVE-2016-10936

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

CVE-2015-9352

The wp-polls plugin before 2.72 for WordPress has SQL injection...

Sql injection

The wp-polls plugin before 2.72 for WordPress has SQL injection...

Design/Logic Flaw

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

Design/Logic Flaw

The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list...

Cross site scripting

The cp-polls plugin before 1.0.5 for WordPress has XSS...

CVE-2015-9352

The CVE-2015-9352 entry concerns the WordPress WP-Polls plugin prior to version 2.72, which contains an SQL injection flaw due to lack of validation of externally supplied SQL statements in database operations. Affected component: WP-Polls plugin for WordPress. Root cause: unsafely constructed SQ...

CVE-2015-9352

The wp-polls plugin before 2.72 for WordPress has SQL injection...

CVE-2016-10936

The CVE-2016-10936 entry relates to the WordPress WP-Polls plugin. Affected version: WP-Polls before 2.73.1. Root cause: insufficient input validation on the polls-options page, leading to cross-site scripting via the poll_bar_style parameter. Impact: remote attackers with admin access and user i...

CVE-2014-10395

The CVE-2014-10395 issue affects the WordPress cp-polls plugin prior to version 1.0.1, introducing a cross-site scripting (XSS) vulnerability in the votes list. Root cause described in CNVD as insufficient validation of client-side data by the web application. Impact noted as potential execution ...

CVE-2014-10395

The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list...

CVE-2015-9346

The cp-polls plugin before 1.0.5 for WordPress has XSS...

CVE-2015-9346

CVE-2015-9346 concerns the WordPress cp-polls plugin prior to version 1.0.5, where a cross-site scripting (XSS) vulnerability exists in the plugin’s handling of user-supplied input. The issue is described as an XSS flaw enabling an attacker to execute client-side code within the context of the af...

Telegram Gained 3 Million New Users During WhatsApp, Facebook Outage

WhatsApp, Facebook, and Instagram faced a widespread outage yesterday with users from around the world reporting issues with sending messages on WhatsApp and Messenger, posting feeds on Facebook and accessing other features on the three Facebook-owned platforms. While the outage was quite troubli...

Node.js third-party modules: [increments] sql injection

I would like to report SQL Injection in increments. It allows creating fake polls. Module module name: increments version: 1.2.1 npm page: https://www.npmjs.com/package/increments Module Description Increment is a database-driven for creating polls and taking votes for various options, candidates...

LayerBB 1.1.2 Cross Site Scripting

Exploit Title: LayerBB 1.1.2 - Cross-Site Scripting Date: 11/19/2018 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://forum.layerbb.com/downloads.php?view=file&id=28 Version: 1.1.2 Tested on: Ubuntu 18.04 CVE: CVE-2019-7688 1. Description: LayerBB is a free open-source...