Vulnerabilities

TI-2026-28622 CVE-2026-39651 · GHSA-4483-ppjr-hhm4

WordPress Total Poll Lite plugin <= 4.12.0 - Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through <= 4.12.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00191 Published 2026-04-08 No fix listed CWE-862

TI-2026-21507 CVE-2026-27044 · GHSA-83q4-w7hc-jf49

WordPress Total Poll Lite plugin <= 4.12.0 - Remote Code Execution (RCE) vulnerability

MEDIUM 43

Improper Control of Generation of Code ('Code Injection') vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through <= 4.12.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00307 Published 2026-03-25 No fix listed CWE-94

TI-2026-00469 CVE-2026-0677 · GHSA-c4qv-frh3-43c3

WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability

LOW 30

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injection.This issue affects TotalContest Lite: from n/a through <= 2.9.1.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00242 Published 2026-03-20 No fix listed CWE-502

TI-2025-17549 CVE-2025-23782 · GHSA-346m-8hrr-v52g

WordPress TotalContest Lite Plugin <= 2.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Reflected XSS.This issue affects TotalContest Lite: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79

TI-2024-12846 CVE-2024-13822 · GHSA-gxcp-qqh4-j6r9

Total Contest Lite <= 2.8.1 - Reflected XSS

MEDIUM 60

The Photo Contest | Competition | Video Contest WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be us…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2025-02-24 No fix listed CWE-79

TI-2023-12181 CVE-2023-27449 · GHSA-fj4j-xqfc-mrx8

WordPress Total Poll Lite plugin <= 4.8.6 - Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through 4.8.6.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00396 Published 2024-12-09 No fix listed CWE-862

TI-2024-21695 CVE-2024-32821 · GHSA-wcmh-jf9v-h42g

WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in TotalSuite Total Poll Lite.This issue affects Total Poll Lite: from n/a through 4.9.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00373 Published 2024-06-09 No fix listed CWE-862