WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
poll-wp
Published
2021-08-25
Title
Responsive Poll < 1.5.9 - Reflected Cross-Site Scripting
Slug
poll-wp
Published
2024-09-30
Title
TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection
Slug
poll-wp
Published
2024-10-09
Title
TS Poll < 2.4.1 - Admin+ SQLi
Slug
poll-wp
Published
2025-04-14
Title
TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.7 - Authenticated (Administrator+) SQL Injection via 's' Parameter
Slug
poll-wp
Published
2025-12-22
Title
TS Poll < 2.6.0 - Missing Authorization
Slug
poll-wp
Published
2026-01-27
Title
TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.6.0 - Authenticated (Editor+) Server-Side Request Forgery
Slug
pollcaster-shortcode
Published
2025-11-20
Title
Pollcaster Shortcode Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Rating 2.0.24 - polldaddy-org.php unique_id Ratings Shortcode XSS
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Rating 2.0.23 - polldaddy-org.php polldaddy-ratings-title-filter Parameter Reflected XSS
Slug
polldaddy
Published
2014-08-01
Title
Polldaddy Polls & Ratings 2.0.20 - Cross-Site Request Forgery
Slug
polldaddy
Published
2016-05-26
Title
Polldaddy Polls & Ratings <= 2.0.31 - Shortcode Stored Cross-Site Scripting (XSS)
Slug
polldaddy
Published
2022-07-18
Title
Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting
Slug
polldaddy
Published
2022-11-17
Title
Crowdsignal Dashboard < 3.0.10 - Contributor+ Rating Settings Update
Slug
polldaddy
Published
2023-12-27
Title
Crowdsignal Dashboard < 3.1.0 - Rating Update via CSRF
Slug
polldaddy
Published
2023-12-27
Title
Crowdsignal Dashboard < 3.1.0 - Reflected Cross-Site Scripting
Slug
polldaddy
Published
2024-09-24
Title
Crowdsignal Dashboard < 3.1.4 - Cross-Site Request Forgery
Slug
pollin
Published
2025-02-18
Title
Pollin <= 1.01.1 - Authenticated (Admin+) SQL Injection
Slug
pollin
Published
2025-02-18
Title
Pollin <= 1.01.1 - Reflected Cross-Site Scripting
Slug
polls-widget
Published
2021-06-22
Title
Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection
Slug
polls-widget
Published
2022-08-25
Title
Poll, Survey, Questionnaire and Voting system <= 1.7.4 - Admin+ Stored XSS
Slug
polo-video-gallery
Published
2021-09-20
Title
Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting
Slug
polylang
Published
2014-08-01
Title
Polylang 1.5.1 - User Description H&ling Stored XSS
Slug
polylang
Published
2019-01-16
Title
Polylang <= 2.5 - CSRF in categories and media duplication
Slug
polylang
Published
2025-10-28
Title
Polylang < 3.7.4 - Contributor+ PHP Object Injection
Slug
polylang
Published
2026-07-22
Title
Polylang < 3.8.6 - Contributor+ Private Post Disclosure via Row Update AJAX Actions