Plugin icon

Poll Maker – Versus Polls, Anonymous Polls, Image Polls

poll-maker

Vulnerabilities:

22

Last Updated:

March 31, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2025-11-12
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 6.0.8 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter
Fixed in
Fixed in 6.0.8
CVSS
4.9 (medium)
Published
2025-09-22
Title
Poll Maker < 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.0.3
CVSS
6.4 (medium)
Published
2025-08-15
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 5.9.0 - Unauthenticated Basic Information Exposure
Fixed in
Fixed in 5.9.0
CVSS
5.3 (medium)
Published
2025-05-07
Title
Poll Maker < 5.7.8 - Unauthenticated Race Condition to Multi-Vote
Fixed in
Fixed in 5.7.8
CVSS
5.3 (medium)
Published
2025-02-23
Title
Poll Maker < 5.5.4 - Admin+ Stored XSS
Fixed in
Fixed in 5.5.4
CVSS
3.5 (low)
Published
2025-02-23
Title
Poll Maker < 5.6.6 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 5.6.6
CVSS
4.9 (medium)
Published
2025-01-03
Title
Poll Maker < 5.5.5 - Unauthenticated HTML Injection
Fixed in
Fixed in 5.5.5
CVSS
5.3 (medium)
Published
2025-01-03
Title
Poll Maker < 5.5.7 - Missing Authorization
Fixed in
Fixed in 5.5.7
CVSS
6.5 (medium)
Published
2024-12-15
Title
Poll Maker < 5.5.1 - Missing Authorization
Fixed in
Fixed in 5.5.1
CVSS
6.5 (medium)
Published
2024-12-06
Title
Poll Maker < 5.5.5 - Cross-Site Request Forgery to Poll Duplication
Fixed in
Fixed in 5.5.5
CVSS
4.3 (medium)
Published
2024-11-08
Title
WordPress Poll Maker Plugin < 5.4.7 - Authenticated (Administrator+) Time-Based SQL Injection
Fixed in
Fixed in 5.4.7
CVSS
4.9 (medium)
Published
2024-10-25
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 5.4.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings
Fixed in
Fixed in 5.4.7
CVSS
5.5 (medium)
Published
2024-10-25
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 5.4.7 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
Fixed in
Fixed in 5.4.7
CVSS
4.9 (medium)
Published
2024-04-18
Title
Poll Maker – Best WordPress Poll Plugin < 5.1.9 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.1.9
CVSS
7.2 (high)
Published
2024-04-18
Title
Poll Maker – Best WordPress Poll Plugin < 5.1.9 - Missing Authorization to Unauthenticated Email Enumeration
Fixed in
Fixed in 5.1.9
CVSS
5.3 (medium)
Published
2023-12-26
Title
Poll Maker < 4.8.1 - Missing Authorization
Fixed in
Fixed in 4.8.1
CVSS
5.3 (medium)
Published
2023-10-12
Title
Poll Maker < 4.7.2 - Missing Authorization
Fixed in
Fixed in 4.7.2
CVSS
5.3 (medium)
Published
2023-09-25
Title
Poll Maker < 4.7.1 - Reflected XSS
Fixed in
Fixed in 4.7.1
CVSS
7.1 (high)
Published
2022-05-04
Title
Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.0.2
CVSS
3.4 (low)
Published
2021-09-13
Title
Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection
Fixed in
Fixed in 3.4.2
CVSS
9.3 (critical)
Published
2021-07-28
Title
Poll Maker < 3.2.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.2.9
CVSS
7.1 (high)
Published
2021-06-29
Title
Poll Maker < 3.2.1 - Authenticated Blind SQL Injections
Fixed in
Fixed in 3.2.1
CVSS
7.6 (high)