WordPress Plugin Vulnerabilities

Simply Poll 1.4.1 - wp-admin/admin.php Poll Manipulation CSRF

Description

The simply-poll WordPress plugin was affected by a wp-admin/admin.php Poll Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
simply-poll
No known fix

References

Exploitdb
24850
URL
https://packetstormsecurity.com/files/#120833/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
3be72fb8-d5c3-4158-8e2e-7db7b1b173b5

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-11-21
Title
Zegen Core < 2.0.2 - Cross-Site Request Forgery to Arbitrary File Upload
Published
2023-05-30
Title
Ultimate Member < 2.6.1 - Form Duplication via CSRF
Published
2025-04-09
Title
Easyfonts < 1.1.3 - Cross-Site Request Forgery
Published
2021-06-30
Title
WooCommerce Custom Registration Form <= 1.0.4 - Arbitrary Field Deletion and Form Modification via CSRF
Published
2025-06-05
Title
POEditor < 0.9.11 - Cross-Site Request Forgery