Skip to main content

Poll Maker CVE-2025-47545

MEDIUM
Race Condition (CWE-362)
2025-05-07 audit@patchstack.com
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

4
Severity Changed
Apr 23, 2026 - 15:42 NVD
HIGH MEDIUM
CVSS changed
Apr 23, 2026 - 15:42 NVD
8.1 (HIGH) 5.3 (MEDIUM)
Analysis Generated
Mar 28, 2026 - 18:40 vuln.today
CVE Published
May 07, 2025 - 15:16 nvd
HIGH 8.1

DescriptionCVE.org

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker allows Leveraging Race Conditions. This issue affects Poll Maker: from n/a through 5.7.7.

AnalysisAI

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker allows Leveraging Race Conditions.7.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-362. Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker allows Leveraging Race Conditions.7.7. Affected products include: Ays-Pro Poll Maker. Version information: through 5.7.7..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2021-24651 HIGH POC
7.5 Oct 11

The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_po

CVE-2024-9874 HIGH POC
7.2 Nov 09

The Poll Maker - Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based SQL Injecti

CVE-2021-24483 HIGH POC
7.2 Aug 02

The get_poll_categories(), get_polls() and get_reports() functions in the Poll Maker WordPress plugin before 3.2.1 did n

CVE-2021-34635 MEDIUM POC
6.1 Aug 02

The Poll Maker WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the mcount parameter found in the ~/

CVE-2024-13602 MEDIUM POC
4.8 Mar 16

The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high p

CVE-2022-1456 MEDIUM POC
4.8 May 30

The Poll Maker WordPress plugin before 4.0.2 does not sanitise and escape some settings, which could allow high privileg

CVE-2025-26971 HIGH
7.6 Feb 25

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ays-pro Poll Maker

CVE-2024-3600 HIGH
7.2 Apr 19

The Poll Maker - Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a m

CVE-2024-9475 HIGH
7.2 Oct 26

The Poll Maker - Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection

CVE-2025-24577 MEDIUM
6.5 Apr 17

Missing Authorization vulnerability in Ays Pro Poll Maker allows Exploiting Incorrectly Configured Access Control Securi

CVE-2024-56295 MEDIUM
6.5 Jan 15

Missing Authorization vulnerability in Poll Maker Team Poll Maker allows Exploiting Incorrectly Configured Access Contro

CVE-2023-41871 MEDIUM
6.1 Sep 25

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low at

Share

CVE-2025-47545 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy