Wp Polls Project

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13426 Jan 22, 03:15 MEDIUM PATCH This Month

The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to insufficient escaping on the user supplied parameter and lack of. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required.

WordPress XSS SQLi Wp Polls Wordpress Plugin +1

NVD GitHub

CVSS 3.1

5.4

EPSS

0.7%

CVE-2022-1581 Nov 21, 11:15 MEDIUM POC This Month

The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Authentication Bypass Wp Polls Wp Polls Project

NVD WPScan

CVSS 3.1

5.3

EPSS

0.6%

CVE-2022-40130 Nov 18, 23:15 LOW Monitor

Auth. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Information Disclosure Race Condition Wp Polls Wordpress Plugin +1

NVD

CVSS 3.1

3.1

EPSS

0.4%

CVE-2024-13426

EPSS 1% CVSS 5.4

MEDIUM PATCH This Month

WordPress XSS SQLi +3

NVD GitHub

CVE-2022-1581

EPSS 1% CVSS 5.3

MEDIUM POC This Month

WordPress Authentication Bypass Wp Polls +1

NVD WPScan

CVE-2022-40130

EPSS 0% CVSS 3.1

LOW Monitor

Auth. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.

WordPress Information Disclosure Race Condition +3

NVD