Wp-Polls Project Wp-Polls
5 CVEs affecting Wp-Polls Project Wp-Polls. Latest disclosed: 2025-01-22. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9352 | Critical | 9.8 | 2019-08-27 | The wp-polls plugin before 2.72 for WordPress has SQL injection. |
CVE-2016-10936 | Medium | 6.1 | 2019-08-27 | The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option. |
CVE-2024-13426 | Medium | 5.4 | 2025-01-22 | The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to insufficient escaping on the us… |
CVE-2022-1581 | Medium | 5.3 | 2022-11-21 | The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to byp… |
CVE-2022-40130 | Medium | 4.3 | 2022-11-18 | Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress. |