WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
poll-maker
Published
2025-02-23
Title
Poll Maker < 5.6.6 - Authenticated (Administrator+) SQL Injection
Slug
poll-maker
Published
2025-05-07
Title
Poll Maker < 5.7.8 - Unauthenticated Race Condition to Multi-Vote
Slug
poll-maker
Published
2025-08-15
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 5.9.0 - Unauthenticated Basic Information Exposure
Slug
poll-maker
Published
2025-09-22
Title
Poll Maker < 6.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
poll-maker
Published
2025-11-12
Title
Poll Maker – Versus Polls, Anonymous Polls, Image Polls < 6.0.8 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter
Slug
poll-maker
Published
2024-12-15
Title
Poll Maker < 5.5.1 - Missing Authorization
Slug
poll-wp
Published
2020-04-13
Title
Responsive Poll < 1.3.4 - Broken Authentication and Missing Capability Checks on AJAX calls
Slug
poll-wp
Published
2021-08-25
Title
Responsive Poll < 1.5.9 - Reflected Cross-Site Scripting
Slug
poll-wp
Published
2024-09-30
Title
TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection
Slug
poll-wp
Published
2024-10-09
Title
TS Poll < 2.4.1 - Admin+ SQLi
Slug
poll-wp
Published
2025-04-14
Title
TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.7 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Slug
poll-wp
Published
2025-12-22
Title
TS Poll <= 2.5.3 - Missing Authorization
Slug
pollcaster-shortcode
Published
2025-11-20
Title
Pollcaster Shortcode Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Rating 2.0.24 - polldaddy-org.php unique_id Ratings Shortcode XSS
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Rating 2.0.23 - polldaddy-org.php polldaddy-ratings-title-filter Parameter Reflected XSS
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Ratings 2.0.20 - Cross-Site Request Forgery
Slug
polldaddy
Published
2016-05-26
Title
Polldaddy Polls & Ratings <= 2.0.31 - Shortcode Stored Cross-Site Scripting (XSS)
Slug
polldaddy
Published
2022-07-18
Title
Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting
Slug
polldaddy
Published
2022-11-17
Title
Crowdsignal Dashboard < 3.0.10 - Contributor+ Rating Settings Update
Slug
polldaddy
Published
2023-12-27
Title
Crowdsignal Dashboard < 3.1.0 - Rating Update via CSRF
Slug
polldaddy
Published
2023-12-27
Title
Crowdsignal Dashboard < 3.1.0 - Reflected Cross-Site Scripting
Slug
polldaddy
Published
2024-09-24
Title
Crowdsignal Dashboard < 3.1.4 - Cross-Site Request Forgery
Slug
pollin
Published
2025-02-18
Title
Pollin <= 1.01.1 - Authenticated (Admin+) SQL Injection
Slug
pollin
Published
2025-02-18
Title
Pollin <= 1.01.1 - Reflected Cross-Site Scripting
Slug
polls-widget
Published
2021-06-22
Title
Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection