Vulnerabilities

TI-2024-21401 CVE-2024-32514 · GHSA-gqx3-48f5-grxc

WordPress WP Poll Maker plugin <= 3.4 - Authenticated Arbitrary File Upload vulnerability

MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in Poll Maker & Voting Plugin Team (InfoTheme) WP Poll Maker.This issue affects WP Poll Maker: from n/a through 3.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0065 Published 2024-04-17 No fix listed CWE-434

TI-2024-20616 CVE-2024-31240 · GHSA-cqgx-qm2w-88qc

WordPress WP Poll Maker plugin <= 3.1 - Auth. Arbitrary File Deletion vulnerability

LOW 36

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in InfoTheme WP Poll Maker.This issue affects WP Poll Maker: from n/a through 3.1.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00658 Published 2024-04-10 No fix listed CWE-22

TI-2024-19594 CVE-2024-29818 · GHSA-r88r-x2j2-hw6q

WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Poll Maker & Voting Plugin Team (InfoTheme) WP Poll Maker allows Stored XSS.This issue affects WP Poll Maker: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00359 Published 2024-03-27 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Poll Maker plugin <= 3.4 - Authenticated Arbitrary File Upload vulnerability

WordPress WP Poll Maker plugin <= 3.1 - Auth. Arbitrary File Deletion vulnerability

WordPress WP Poll Maker plugin <= 3.1 - Authenticated Cross Site Scripting (XSS) vulnerability