Wp-polls Project Wp-polls — known CVE vulnerabilities

Every CVE whose affected-product data names Wp-polls Project Wp-polls, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2015-9352 — CVSS 9.8 (critical): The wp-polls plugin before 2.72 for WordPress has SQL injection.
• CVE-2016-10936 — CVSS 6.1 (medium): The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option.
• CVE-2024-13426 — CVSS 5.4 (medium): The WP-Polls plugin for WordPress is vulnerable to SQL Injection via COOKIE in all versions up to, and including, 2.77.2 due to…
• CVE-2022-1581 — CVSS 5.3 (medium): The WP-Polls WordPress plugin before 2.76.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which…
• CVE-2022-40130 — CVSS 4.3 (medium): Auth. (subscriber+) Race Condition vulnerability in WP-Polls plugin <= 2.76.0 on WordPress.