Wp-kama Democracy Poll — known CVE vulnerabilities

Every CVE whose affected-product data names Wp-kama Democracy Poll, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-18521 — CVSS 8.8 (high): The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.
• CVE-2017-18520 — CVSS 6.1 (medium): The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.