58 matches found
CVE-2016-10936
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
CVE-2016-10936
The CVE-2016-10936 entry relates to the WordPress WP-Polls plugin. Affected version: WP-Polls before 2.73.1. Root cause: insufficient input validation on the polls-options page, leading to cross-site scripting via the poll_bar_style parameter. Impact: remote attackers with admin access and user i...
PT-2019-7729
Name of the Vulnerable Software and Affected Versions wp-polls plugin versions prior to 2.73.1 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the Poll bar option, allowing potential attackers to inject malicious scripts into the website. Recommendations For...
PT-2019-7311
Name of the Vulnerable Software and Affected Versions wp-polls plugin versions prior to 2.72 Description The issue is related to SQL injection in the wp-polls plugin for WordPress. Recommendations For versions prior to 2.72, update to version 2.72 or later to resolve the issue...
CVE-2016-10936: Improper Neutralization of Input During Web Page Generation
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
CVE-2015-9352: Improper Neutralization of Special Elements used in an SQL Command
The wp-polls plugin before 2.72 for WordPress has SQL injection...
WP-Polls <= 2.73 - Authenticated Reflected Cross-Site Scripting (XSS)
The WP-Polls WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...
WP Polls < 2.72 - SQL Injection
The WP-Polls WordPress plugin was affected by a SQL Injection security vulnerability...
WP Fastest Cache <= 0.8.4.8 - Blind SQL Injection
According to the researcher, for this vulnerability to be present WP-Polls plugin also needs to be installed. PoC...
WP Fastest Cache 0.8.4.8 Blind SQL Injection
Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this...
WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this vulnerabilitie...
WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection
WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...
WP-Polls <= 2.70 - Stored Cross-Site Scripting (XSS)
The /wp-admin/admin.php?page=wp-polls%2Fpolls-add.php page is vulnerable to XSS within the pollqquestion and pollaanswers parameters. PoC Add a new poll with the question or answer as...
WP-Polls <= 2.70 - Stored Cross-Site Scripting (XSS)
The /wp-admin/admin.php?page=wp-polls%2Fpolls-add.php page is vulnerable to XSS within the pollqquestion and pollaanswers parameters. Add a new poll with the question or answer as...
Wordpress wp-polls plugin Full Path Disclosure vulnerability
Exploit for php platform in category web applications Exploit: http://localhost/wp-content/plugins/wp-polls/polls-templates.php Demo http://www.catenaccio.nl/wp-content/plugins/wp-polls/polls-templates.php http://www.iaei.org/wp-content/plugins/wp-polls/polls-templates.php...
WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter
WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter Exploit Title: WP-Polls 2.x Incorrect Flood Filter Date: 30/11/2009 Author: Jbyte jbyte-security.blogspot.com Software Link: http://lesterchan.net/wordpress/readme/wp-polls.html Version: 2.x Tested on: Windows 7/windows xp/ ubuntu 9.04/ ubunt...
WordPress WP-Polls 2.x Incorrect Flood Filter
Exploit for unknown platform in category web applications ============================================= WordPress WP-Polls 2.x Incorrect Flood Filter ============================================= Exploit Title: WP-Polls 2.x Incorrect Flood Filter Date: 30/11/2009 Software Link:...
WordPress Plugin WP-Polls 2.x - Incorrect Flood Filter
Exploit Title: WP-Polls 2.x Incorrect Flood Filter Date: 30/11/2009 Author: Jbyte jbyte-security.blogspot.com Software Link: http://lesterchan.net/wordpress/readme/wp-polls.html Version: 2.x Tested on: Windows 7/windows xp/ ubuntu 9.04/ ubuntu 9.10 Code :...