517 matches found
CVE-2022-1581: Undefined Security Weakness
The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...
CVE-2022-1581
CVE-2022-1581 affects the WordPress plugin WP-Polls prior to version 2.76.0. The vulnerability arises because the plugin prioritizes the visitor’s IP taken from certain HTTP headers over PHP’s REMOTE_ADDR, enabling bypass of IP-based voting restrictions in certain scenarios. According to connecte...
PT-2022-13980 · WordPress · Wp-Polls
Name of the Vulnerable Software and Affected Versions: WP-Polls versions prior to 2.76.0 Description: The issue allows bypassing IP-based limitations to vote in certain situations due to the plugin prioritizing getting a visitor's IP from certain HTTP headers over PHP's REMOTE ADDR...
CVE-2022-40130
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
CVE-2022-40130
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
Race condition
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
CVE-2022-40130 WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
CVE-2022-40130 WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
CVE-2022-40130
The CVE-2022-40130 entry documents a race-condition vulnerability in the WordPress WP-Polls plugin, affecting versions up to and including 2.76.0. The issue allows authenticated users (subscriber+ level) to tamper with poll votes due to improper synchronization. Remediation according to the sourc...
WordPress plugin WP-Polls 竞争条件问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2022-25232 · WordPress · Wp-Polls
Name of the Vulnerable Software and Affected Versions: WP-Polls plugin versions prior to 2.76.1 Description: A race condition issue exists in the WP-Polls plugin, affecting users with subscriber or higher permissions. This issue can be exploited due to improper synchronization, potentially leadin...
CVE-2022-40130: Concurrent Execution using Shared Resource with Improper Synchronization
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
WS-2022-0462
In jitsi-meet, the poll feature used to send user JIDs and names included in protocol messages, rather than derive from the XMPP session of the sender. Consequently, anyone in the conference could send messages with fake senderId or voterId values, and arbitrarily forge polls and votes...
WordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Nosa "apapedulimu" Shandy Patchstack Alliance in the WordPress Crowdsignal Dashboard plugin versions = 3.0.9. Solution Update the WordPress Polldaddy Polls & Ratings plugin to the latest available version at least 3.0.10...
WordPress WP-Polls plugin <= 2.75.6 - IP Validation Bypass vulnerability
IP Validation Bypass vulnerability discovered by Daniel Ruf in WordPress WP-Polls plugin versions = 2.75.6. Solution Update the WordPress WP-Polls plugin to the latest available version at least 2.76.0...
WP-Polls < 2.76.0 - IP Validation Bypass
The plugin prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...
WordPress WP-Polls plugin <= 2.76.0 - Race Condition vulnerability
Race Condition vulnerability leading to voting manipulation discovered by Nguy Minh Tuan Patchstack Alliance in the WordPress WP-Polls plugin versions = 2.76.0. Solution Update the WordPress WP-Polls plugin to the latest available version at least 2.77.0...
WP-Polls < 2.77.0 - Subscriber+ Race Condition
The plugin is affect by a race condition which could allow any authenticated users to tamper with the votes on a poll...