PatchTheCVEtotal-soft vulnerabilities
Recent CVEs affecting total-soft products. 5 tracked.
total-soft has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-05-15. Highest priority: CVE-2024-8625 (score 51/100).
- CVE-2024-9769 MEDIUM 4.4 UPGRADE The Video Gallery – Best WordPress YouTube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scr
- CVE-2024-9022 HIGH 7.2 UPGRADE The TS Poll – Survey, Versus Poll, Image Poll, Video Poll plugin for WordPress is vulnerable to SQL Injection
- CVE-2024-8700 HIGH 7.5 UPGRADE The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing
- CVE-2024-8625 HIGH 7.2 UPGRADE The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL s
- CVE-2024-10247 HIGH 7.2 UPGRADE The Video Gallery – Best WordPress YouTube Gallery Plugin plugin for WordPress is vulnerable to time-based SQL
FAQ
How do I fix total-soft vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is total-soft being exploited right now?
None of the tracked total-soft CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which total-soft CVE should I patch first?
CVE-2024-8625 currently ranks highest (51/100): The TS Poll WordPress plugin before 2.4.0 does not sanitize and escape a parameter before using it in a SQL s.