WordPress Plugin Vulnerabilities

Poll Maker < 5.7.8 - Unauthenticated Race Condition to Multi-Vote

Description

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to a Race Condition in all versions up to, and including, 5.7.7. This is due to the plugin not properly restricting a user's ability to fill out a poll multiple times.. This makes it possible for unauthenticated attackers to fill out a poll multiple times.

Affects Plugins

Fixed in 5.7.8

References

Classification

Type
RACE CONDITION
CWE

Miscellaneous

Original Researcher
Ibrahim Mohammad
Verified
No

Timeline

Publicly Published
2025-05-07 (about 1 year ago)
Added
2025-05-13 (about 1 year ago)
Last Updated
2025-05-13 (about 1 year ago)

Other