WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
poll-wp
Published
2026-01-27
Title
TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.6.0 - Authenticated (Editor+) Server-Side Request Forgery
Slug
pollcaster-shortcode
Published
2025-11-20
Title
Pollcaster Shortcode Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Rating 2.0.24 - polldaddy-org.php unique_id Ratings Shortcode XSS
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Rating 2.0.23 - polldaddy-org.php polldaddy-ratings-title-filter Parameter Reflected XSS
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Ratings 2.0.20 - Cross-Site Request Forgery
Slug
polldaddy
Published
2016-05-26
Title
Polldaddy Polls & Ratings <= 2.0.31 - Shortcode Stored Cross-Site Scripting (XSS)
Slug
polldaddy
Published
2022-07-18
Title
Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting
Slug
polldaddy
Published
2022-11-17
Title
Crowdsignal Dashboard < 3.0.10 - Contributor+ Rating Settings Update
Slug
polldaddy
Published
2023-12-27
Title
Crowdsignal Dashboard < 3.1.0 - Rating Update via CSRF
Slug
polldaddy
Published
2023-12-27
Title
Crowdsignal Dashboard < 3.1.0 - Reflected Cross-Site Scripting
Slug
polldaddy
Published
2024-09-24
Title
Crowdsignal Dashboard < 3.1.4 - Cross-Site Request Forgery
Slug
pollin
Published
2025-02-18
Title
Pollin <= 1.01.1 - Authenticated (Admin+) SQL Injection
Slug
pollin
Published
2025-02-18
Title
Pollin <= 1.01.1 - Reflected Cross-Site Scripting
Slug
polls-widget
Published
2021-06-22
Title
Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection
Slug
polls-widget
Published
2022-08-25
Title
Poll, Survey, Questionnaire and Voting system <= 1.7.4 - Admin+ Stored XSS
Slug
polo-video-gallery
Published
2021-09-20
Title
Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting
Slug
polylang
Published
2014-08-01
Title
Polylang 1.5.1 - User Description H&ling Stored XSS
Slug
polylang
Published
2019-01-16
Title
Polylang <= 2.5 - CSRF in categories and media duplication
Slug
polylang
Published
2025-10-28
Title
Polylang < 3.7.4 - Contributor+ PHP Object Injection
Slug
polylang-supertext
Published
2025-05-07
Title
Supertext Translation and Proofreading <= 4.26 - Stored XSS via CSRF
Slug
pondol-bbs
Published
2025-10-19
Title
Pondol BBS <= 1.1.8.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
pondol-carousel
Published
2016-05-11
Title
pondol-carousel 1.0 - Cross-Site Scripting (XSS)
Slug
pondol-formmail
Published
2016-04-13
Title
Pondol Form to Mail <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
pootle-button
Published
2017-10-12
Title
pootle button < 1.2.0 - Authenticated Cross-Site Scripting (XSS)
Slug
pootle-button
Published
2025-01-16
Title
Pootle button <= 1.2.0 - Reflected Cross-Site Scripting