Poll Maker

Vulnerabilities

• CVE-2025-24577

  WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability

  Critical 9.8

• CVE-2025-26971

  WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability

  Critical 9.8

• CVE-2025-47545

  WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability

  High 8.1

• CVE-2023-34013

  WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF)

  High 7.5

• CVE-2024-9874

  WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection

  High 7.2

• CVE-2024-9475

  Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter

  High 7.2

• CVE-2025-57954

  WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability

  Medium 6.5

• CVE-2024-56295

  WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerability

  Medium 6.5

• CVE-2024-3600

  Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting

  Medium 6.1

• CVE-2023-41871

  WordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)

  Medium 6.1

• CVE-2021-34635

  Poll Maker <= 3.2.8 - Reflected Cross-Site Scripting

  Medium 6.1

• CVE-2024-12575

  Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure

  Medium 5.3

• CVE-2024-56277

  WordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerability

  Medium 5.3

• CVE-2023-45766

  WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability

  Medium 5.3

• CVE-2023-50904

  WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability

  Medium 5.3

• CVE-2024-3601

  Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration

  Medium 5.3

• CVE-2025-12620

  Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter

  Medium 4.9

• CVE-2024-9462

  Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings

  Medium 4.8

• CVE-2026-8995

  Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action

  Medium 4.3

• CVE-2024-12115

  Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication

  Medium 4.3