Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: LiquidPoll Clear all filters
TI-2023-18369 CVE-2023-36531 · GHSA-qv2x-7mqw-c4mf

WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability

Priority LOW 22

Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll – Advanced Polls…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01077 Published 2024-12-13 No fix listed CWE-862
TI-2024-06603 CVE-2024-7134 · GHSA-hv2j-vwqr-cq2p

LiquidPoll <= 3.3.78 - Unauthenticated Stored Cross-Site Scripting via form_data Parameter

Priority LOW 38

The LiquidPoll – Polls, Surveys, NPS and Feedback Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘form_data’ parameter in all versions up to, and including, 3.3.78 due to insufficient i…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00416 Published 2024-08-21 No fix listed CWE-79
TI-2024-26579 CVE-2024-39655 · GHSA-9p4j-3hc4-v72r

WordPress LiquidPoll plugin <= 3.3.77 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands.This issue affects LiquidPoll – Advanced Polls f…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0036 Published 2024-08-01 No fix listed CWE-79