WordPress Plugin Vulnerabilities

Responsive Poll 1.6.4,1.7.4 - Cross-Site Scripting (XSS) & CSRF

Description

The responsive-poll WordPress plugin was affected by a Cross-Site Scripting (XSS) & CSRF security vulnerability.

Affects Plugins

Plugin icon
responsive-poll
No known fix

References

URL
https://seclists.org/fulldisclosure/2017/Jan/20
URL
https://advisories.dxw.com/advisories/csrfxss-in-responsive-poll-allows-unauthenticated-attackers-to-do-almost-anything-an-admin-can/
URL
https://codecanyon.net/item/responsive-poll/6785692

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
e3c5d196-791e-411f-9c0a-446c832cfe6e

Timeline

Publicly Published
2017-01-10 (about 9 years ago)
Added
2017-01-11 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities
Published
2017-06-05
Title
Crelly Slider <= 1.1.1 - Multiple Unspecified Vulnerabilities
Published
2016-10-11
Title
CampTix Event Ticketing <= 1.5.0 - CSV Injection Bypasses and XSS
Published
2015-10-15
Title
Events Made Easy < 1.5.50 - Multi CSRF to Stored Cross-Site Scripting & Event Deletion
Published
2014-08-01
Title
IWantOneButton 3.0.1 - Multiple Vulnerabilities