PatchTheCVEwordpress poll vulnerabilities and fixes
Recent CVEs affecting wordpress poll, with upgrade or downgrade steps. 3 tracked.
Also searched as: wordpresspoll.
wordpress poll has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-08-26. Highest priority: CVE-2013-1401 (score 67/100).
- CVE-2020-24315 HIGH 7.5 UPGRADE Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST paramet
- CVE-2013-1401 CRITICAL 9.8 DOWNGRADE Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions
- CVE-2013-1400 CRITICAL 9.8 DOWNGRADE Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attacke
FAQ
How do I fix wordpress poll vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wordpress poll being exploited right now?
None of the tracked wordpress poll CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wordpress poll CVE should I patch first?
CVE-2013-1401 currently ranks highest (67/100): Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions .