All products
poll-maker
WordPress · Plugin24 reports
| Report | Product | Ecosystem | Severity | Fix status | Last updated |
| Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX ActionCVE-2026-8995 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` ParameterCVE-2025-12620 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-57954 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information ExposureCVE-2024-12575 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL InjectionCVE-2024-9874 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 5.7.7 - Unauthenticated Race Condition to Multi-VoteCVE-2025-47545 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 5.5.0 - Missing AuthorizationCVE-2025-24577 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 5.5.3 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-13602 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 5.6.5 - Authenticated (Administrator+) SQL InjectionCVE-2025-26971 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.5.4 - Unauthenticated HTML InjectionCVE-2024-56277 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 5.5.6 - Missing AuthorizationCVE-2024-56295 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll DuplicationCVE-2024-12115 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll SettingsCVE-2024-9462 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by ParameterCVE-2024-9475 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email EnumerationCVE-2024-3601 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site ScriptingCVE-2024-3600 |
poll-maker |
WordPress |
High
|
Fix reported |
|
| Poll Maker <= 4.7.0 - Reflected Cross-Site ScriptingCVE-2023-41871 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker <= 4.6.2 - Authenticated (Admin+) Server-Side Request ForgeryCVE-2023-34013 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|
| Poll Maker < 3.4.2 - Unauthenticated SQL InjectionCVE-2021-24651 |
poll-maker |
WordPress |
High
|
Fix reported |
|
| Poll Maker <= 4.7.1 - Missing AuthorizationCVE-2023-45766 |
poll-maker |
WordPress |
Medium
|
Fix reported |
|