CVE-2022-1581: Undefined Security Weakness

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

CVE-2022-1581

CVE-2022-1581 affects the WordPress plugin WP-Polls prior to version 2.76.0. The vulnerability arises because the plugin prioritizes the visitor’s IP taken from certain HTTP headers over PHP’s REMOTE_ADDR, enabling bypass of IP-based voting restrictions in certain scenarios. According to connecte...

CVE-2022-40130

Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...

Race condition

Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...

CVE-2022-40130 WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability

Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...

CVE-2022-40130 WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability

Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...

CVE-2022-40130

The CVE-2022-40130 entry documents a race-condition vulnerability in the WordPress WP-Polls plugin, affecting versions up to and including 2.76.0. The issue allows authenticated users (subscriber+ level) to tamper with poll votes due to improper synchronization. Remediation according to the sourc...

CVE-2022-40130: Concurrent Execution using Shared Resource with Improper Synchronization

Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...

WordPress WP-Polls plugin <= 2.75.6 - IP Validation Bypass vulnerability

IP Validation Bypass vulnerability discovered by Daniel Ruf in WordPress WP-Polls plugin versions = 2.75.6. Solution Update the WordPress WP-Polls plugin to the latest available version at least 2.76.0...

WP-Polls < 2.76.0 - IP Validation Bypass

The plugin prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...

WordPress WP-Polls plugin <= 2.76.0 - Race Condition vulnerability

Race Condition vulnerability leading to voting manipulation discovered by Nguy Minh Tuan Patchstack Alliance in the WordPress WP-Polls plugin versions = 2.76.0. Solution Update the WordPress WP-Polls plugin to the latest available version at least 2.77.0...

WP-Polls < 2.77.0 - Subscriber+ Race Condition

The plugin is affect by a race condition which could allow any authenticated users to tamper with the votes on a poll...

WordPress wp-polls plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-polls is a plugin used to build a voting system in it. A cross-site scripting vulnerability exists in WordPress wp-polls plugin...

CVE-2016-10936

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

CVE-2015-9352

The wp-polls plugin before 2.72 for WordPress has SQL injection...

Design/Logic Flaw

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

Sql injection

The wp-polls plugin before 2.72 for WordPress has SQL injection...

CVE-2015-9352

The wp-polls plugin before 2.72 for WordPress has SQL injection...

CVE-2015-9352

The wp-polls plugin before 2.72 for WordPress has SQL injection...

CVE-2015-9352

The CVE-2015-9352 entry concerns the WordPress WP-Polls plugin prior to version 2.72, which contains an SQL injection flaw due to lack of validation of externally supplied SQL statements in database operations. Affected component: WP-Polls plugin for WordPress. Root cause: unsafely constructed SQ...