PM
Product
Poll Maker
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 13Low 0
Watch
Add Poll Maker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24577 | 9.8 | Apr 17 | WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability Affected: through 5.5.0 |
| CVE-2025-26971 | 9.8 | Feb 25 | WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability Affected: through 5.6.5 |
| CVE-2025-47545 | 8.1 | May 7 | WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability Affected: through 5.7.7 |
| CVE-2023-34013 | 7.5 | Nov 13 | WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF) Affected: through 4.6.2 |
| CVE-2021-24651 | 7.5 | Oct 11 | Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection Affected: before 3.4.2 |
| CVE-2024-9874 | 7.2 | Nov 9 | WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection Affected: before 5.4.7 |
| CVE-2024-9475 | 7.2 | Oct 26 | Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter Affected: before 5.4.7 |
| CVE-2021-24483 | 7.2 | Aug 2 | Poll Maker < 3.2.1 - Authenticated Blind SQL Injections Affected: 3.2.1 before 3.2.1 |
| CVE-2025-57954 | 6.5 | Sep 22 | WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability Affected: through 6.0.2 |
| CVE-2024-56295 | 6.5 | Jan 15 | WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerability Affected: through 5.5.6 |
| CVE-2024-3600 | 6.1 | Apr 19 | Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting Affected: before 5.1.9 |
| CVE-2023-41871 | 6.1 | Sep 25 | WordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS) Affected: through 4.7.0 |
| CVE-2021-34635 | 6.1 | Aug 2 | Poll Maker <= 3.2.8 - Reflected Cross-Site Scripting Affected: through 3.2.8 |
| CVE-2024-56277 | 5.3 | Jan 21 | WordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerability Affected: through 5.5.5 |
| CVE-2023-45766 | 5.3 | Jan 2 | WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability Affected: through 4.7.1 |
| CVE-2023-50904 | 5.3 | Dec 9 | WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability Affected: through 4.8.0 |
| CVE-2024-3601 | 5.3 | May 2 | Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration Affected: before 5.1.9 |
| CVE-2024-13602 | 4.8 | Mar 16 | Poll Maker < 5.5.4 - Admin+ Stored XSS Affected: before 5.5.4 |
| CVE-2024-9462 | 4.8 | Oct 26 | Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings Affected: before 5.4.7 |
| CVE-2022-1456 | 4.8 | May 30 | Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting Affected: before 4.0.2 |
| CVE-2024-12115 | 4.3 | Dec 7 | Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication Affected: before 5.5.5 |
Showing 21