Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2016-20066

WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting

WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. Attackers can upload files containing script payloads with event handlers like onerror attributes to execute arbitrary JavaScript in the browsers of users viewing the affected content.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Dwbooster Wordpress
Products
Cp Polls Wordpress
CVE-2016-20067

WordPress CP Polls 1.0.8 Cross-Site Request Forgery

WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Dwbooster Wordpress
Products
Cp Polls Wordpress