PatchTheCVE: poll makerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-47545: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ahttps://patchthecve.com/cve/CVE-2025-47545.htmlhttps://patchthecve.com/cve/CVE-2025-47545.htmlWed, 17 Jun 2026 09:28:17 +0000MEDIUM 5.3: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker poll-maker allows Leveraging Race Conditions.This issue affects Poll Maker: from n/a through <= 5.7.7.CVE-2025-24577: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured https://patchthecve.com/cve/CVE-2025-24577.htmlhttps://patchthecve.com/cve/CVE-2025-24577.htmlWed, 17 Jun 2026 08:59:15 +0000MEDIUM 6.5: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 5.5.0.CVE-2024-13602: The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could ahttps://patchthecve.com/cve/CVE-2024-13602.htmlhttps://patchthecve.com/cve/CVE-2024-13602.htmlWed, 17 Jun 2026 07:02:20 +0000MEDIUM 4.8: The Poll Maker WordPress plugin before 5.5.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).CVE-2025-26971: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro https://patchthecve.com/cve/CVE-2025-26971.htmlhttps://patchthecve.com/cve/CVE-2025-26971.htmlWed, 17 Jun 2026 09:02:41 +0000HIGH 7.6: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ays Pro Poll Maker poll-maker allows Blind SQL Injection.This issue affects Poll Maker: from n/a through <= 5.6.5.CVE-2024-56277: Improper Encoding or Escaping of Output vulnerability in Ays Pro Poll Maker poll-maker.This issue affects Pollhttps://patchthecve.com/cve/CVE-2024-56277.htmlhttps://patchthecve.com/cve/CVE-2024-56277.htmlWed, 17 Jun 2026 08:11:58 +0000MEDIUM 5.3: Improper Encoding or Escaping of Output vulnerability in Ays Pro Poll Maker poll-maker.This issue affects Poll Maker: from n/a through < 5.5.5.CVE-2024-56295: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured https://patchthecve.com/cve/CVE-2024-56295.htmlhttps://patchthecve.com/cve/CVE-2024-56295.htmlWed, 17 Jun 2026 08:12:00 +0000MEDIUM 6.5: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 5.5.6.CVE-2023-45766: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured https://patchthecve.com/cve/CVE-2023-45766.htmlhttps://patchthecve.com/cve/CVE-2023-45766.htmlWed, 17 Jun 2026 06:29:30 +0000MEDIUM 5.3: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 4.7.1.CVE-2023-50904: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured https://patchthecve.com/cve/CVE-2023-50904.htmlhttps://patchthecve.com/cve/CVE-2023-50904.htmlWed, 17 Jun 2026 06:40:12 +0000MEDIUM 5.3: Missing Authorization vulnerability in Ays Pro Poll Maker poll-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll Maker: from n/a through <= 4.8.0.CVE-2024-12115: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Rhttps://patchthecve.com/cve/CVE-2024-12115.htmlhttps://patchthecve.com/cve/CVE-2024-12115.htmlWed, 17 Jun 2026 06:59:04 +0000MEDIUM 4.3: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.4. This is due to missing or incorrect nonce validation on the duplicate_poll() function. This makes it possible for unauthenticated CVE-2024-9874: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based Shttps://patchthecve.com/cve/CVE-2024-9874.htmlhttps://patchthecve.com/cve/CVE-2024-9874.htmlWed, 17 Jun 2026 08:25:25 +0000MEDIUM 4.9: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 5.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exiCVE-2024-9475: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL https://patchthecve.com/cve/CVE-2024-9475.htmlhttps://patchthecve.com/cve/CVE-2024-9475.htmlWed, 17 Jun 2026 08:24:39 +0000MEDIUM 4.9: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the order_by parameter in all versions up to, and including, 5.4.6 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existiCVE-2024-9462: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Crosshttps://patchthecve.com/cve/CVE-2024-9462.htmlhttps://patchthecve.com/cve/CVE-2024-9462.htmlWed, 17 Jun 2026 08:24:36 +0000MEDIUM 5.5: The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scripting via poll settings in all versions up to, and including, 5.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,