48 matches found
Race condition
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
CVE-2022-40130 WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
CVE-2022-40130 WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerability
Auth. subscriber+ Race Condition vulnerability in WP-Polls plugin = 2.76.0 on WordPress...
CVE-2022-40130
The CVE-2022-40130 entry documents a race-condition vulnerability in the WordPress WP-Polls plugin, affecting versions up to and including 2.76.0. The issue allows authenticated users (subscriber+ level) to tamper with poll votes due to improper synchronization. Remediation according to the sourc...
WP-Polls < 2.76.0 - IP Validation Bypass
The plugin prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass IP-based limitations to vote in certain situations...
WordPress WP-Polls plugin <= 2.75.6 - IP Validation Bypass vulnerability
IP Validation Bypass vulnerability discovered by Daniel Ruf in WordPress WP-Polls plugin versions = 2.75.6. Solution Update the WordPress WP-Polls plugin to the latest available version at least 2.76.0...
WordPress WP-Polls plugin <= 2.76.0 - Race Condition vulnerability
Race Condition vulnerability leading to voting manipulation discovered by Nguy Minh Tuan Patchstack Alliance in the WordPress WP-Polls plugin versions = 2.76.0. Solution Update the WordPress WP-Polls plugin to the latest available version at least 2.77.0...
WP-Polls < 2.77.0 - Subscriber+ Race Condition
The plugin is affect by a race condition which could allow any authenticated users to tamper with the votes on a poll...
WordPress wp-polls plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-polls is a plugin used to build a voting system in it. A cross-site scripting vulnerability exists in WordPress wp-polls plugin...
CVE-2016-10936
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
CVE-2015-9352
The wp-polls plugin before 2.72 for WordPress has SQL injection...
Sql injection
The wp-polls plugin before 2.72 for WordPress has SQL injection...
Design/Logic Flaw
The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...
CVE-2015-9352
The wp-polls plugin before 2.72 for WordPress has SQL injection...
CVE-2015-9352
The CVE-2015-9352 entry concerns the WordPress WP-Polls plugin prior to version 2.72, which contains an SQL injection flaw due to lack of validation of externally supplied SQL statements in database operations. Affected component: WP-Polls plugin for WordPress. Root cause: unsafely constructed SQ...
CVE-2016-10936
The CVE-2016-10936 entry relates to the WordPress WP-Polls plugin. Affected version: WP-Polls before 2.73.1. Root cause: insufficient input validation on the polls-options page, leading to cross-site scripting via the poll_bar_style parameter. Impact: remote attackers with admin access and user i...
WP-Polls <= 2.73 - Authenticated Reflected Cross-Site Scripting (XSS)
The WP-Polls WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...
WP Polls < 2.72 - SQL Injection
The WP-Polls WordPress plugin was affected by a SQL Injection security vulnerability...
WP Fastest Cache 0.8.4.8 Blind SQL Injection
Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this...