Totalsoft
10 CVEs across 6 Totalsoft products. Browse Totalsoft vulnerabilities, severities, and proof-of-concept exploits.
Totalsoft products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-25428 | Medium | 4.4 | 2026-02-19 | Server-Side Request Forgery (SSRF) vulnerability in totalsoft TS Poll poll-wp allows Server Side Request Forgery.This issue affects TS Poll: from n/a through <… |
CVE-2025-62098 | Medium | 5.4 | 2025-12-31 | Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2025-68588 | Medium | 4.3 | 2025-12-24 | Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS… |
CVE-2025-3470 | Medium | 4.9 | 2025-04-15 | The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the s parameter in all versions up to, and in… |
CVE-2025-22632 | High | 7.1 | 2025-02-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in totalsoft WooCommerce Pricing – Product Pricing woo-prici… |
CVE-2024-9769 | Medium | 4.4 | 2024-12-06 | The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to… |
CVE-2024-10247 | High | 7.2 | 2024-12-06 | The Video Gallery – Best WordPress YouTube Gallery Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the orderby parameter in all versi… |
CVE-2024-9022 | High | 7.2 | 2024-10-10 | The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to… |
CVE-2022-36390 | Medium | 4.1 | 2022-09-21 | Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. |
CVE-2022-38067 | Medium | 6.5 | 2022-09-09 | Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. |