totalsoft

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

totalsoft records in CISA KEV

No totalsoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Video Gallery 4 records MEDIUM Event Calendar 3 records HIGH Ts Poll 2 records HIGH Responsive Poll 1 record MEDIUM

Records

2 records in Ts Poll · all components

TI-2024-08375 CVE-2024-9022 · GHSA-6h29-g2x6-h6hg

SQL injection in totalsoft TS Poll – Survey, Versus Poll, Image Poll, Video Poll

HIGH 67

The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.4.0 due to insufficient escaping on the us…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00967 Published 2024-10-10 No fix listed CWE-89

TI-2024-08001 CVE-2024-8625 · GHSA-jqhv-47hf-83hh

TS Poll – Survey, Versus Poll, Image Poll, Video Poll < 2.4.0 - Admin+ SQL Injection

HIGH 67

The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02323 Published 2024-10-21 Fixed in 2.4.0 CWE-89

Open these records in search →

Critical	2
High	6
Medium	8
Low	0
No CVSS	0