CVE-2025-12620

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12620", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-02T16:28:40.451Z", "datePublished": "2025-11-13T05:30:39.612Z", "dateUpdated": "2026-04-08T16:54:14.819Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:54:14.819Z"}, "affected": [{"vendor": "ays-pro", "product": "Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "6.0.7", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the \u2018filterbyauthor\u2019 parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "title": "Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/56e0efba-4913-4772-8a5b-5cb5c84b5d48?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/poll-maker/tags/6.0.7/includes/lists/class-poll-maker-polls-list-table.php#L2033"}, {"url": "https://plugins.trac.wordpress.org/browser/poll-maker/tags/6.0.7/includes/lists/class-poll-maker-polls-list-table.php#L2053"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "baseScore": 4.9, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "M Indra Purnama"}], "timeline": [{"time": "2025-10-24T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-11-02T16:44:09.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-12T16:46:52.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-14T16:49:36.945679Z", "id": "CVE-2025-12620", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-14T16:49:43.556Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12620", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-14T16:49:36.945679Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-14T16:49:40.689Z"}}], "cna": {"title": "Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter", "credits": [{"lang": "en", "type": "finder", "value": "M Indra Purnama"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "ays-pro", "product": "Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "6.0.7"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-24T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-11-02T16:44:09.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-12T16:46:52.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/56e0efba-4913-4772-8a5b-5cb5c84b5d48?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/poll-maker/tags/6.0.7/includes/lists/class-poll-maker-polls-list-table.php#L2033"}, {"url": "https://plugins.trac.wordpress.org/browser/poll-maker/tags/6.0.7/includes/lists/class-poll-maker-polls-list-table.php#L2053"}], "descriptions": [{"lang": "en", "value": "The Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the \u2018filterbyauthor\u2019 parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:54:14.819Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12620", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:54:14.819Z", "dateReserved": "2025-11-02T16:28:40.451Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-13T05:30:39.612Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls", "vendor": "ays-pro", "versions": [{"lessThanOrEqual": "6.0.7", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to generic SQL Injection via the \u2018filterbyauthor\u2019 parameter in all versions up to, and including, 6.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}, {"lang": "es", "value": "El plugin Poll Maker - Versus Polls, Anonymous Polls, Image Polls para WordPress es vulnerable a inyecci\u00f3n SQL gen\u00e9rica a trav\u00e9s del par\u00e1metro 'filterbyauthor' en todas las versiones hasta la, e incluyendo, la 6.0.7 debido a un escape insuficiente en el par\u00e1metro proporcionado por el usuario y la falta de preparaci\u00f3n suficiente en la consulta SQL existente. Esto hace posible que atacantes autenticados, con acceso de nivel de Administrador y superior, a\u00f1adan consultas SQL adicionales a consultas ya existentes que pueden utilizarse para extraer informaci\u00f3n sensible de la base de datos."}], "id": "CVE-2025-12620", "lastModified": "2026-10-07T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12620", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-14T16:49:36.945679Z", "version": "2.0.3"}}]}, "published": "2025-11-13T06:16:00.343", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/poll-maker/tags/6.0.7/includes/lists/class-poll-maker-polls-list-table.php#L2033"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/poll-maker/tags/6.0.7/includes/lists/class-poll-maker-polls-list-table.php#L2053"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/56e0efba-4913-4772-8a5b-5cb5c84b5d48?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T00:33:33.907958+00:00", "value": {"mitigation_remediation": ["Apply the latest plugin version that excludes the vulnerability (search for updates to Poll Maker > 6.0.7).", "If an update is unavailable, immediately remove or deactivate the plugin to eliminate the attack surface.", "Implement strict input validation or use parameterized queries for the 'filterbyauthor' parameter to protect against SQL injection (CWE\u201189).", "Restrict administrative access by enforcing multi\u2011factor authentication and limiting the number of privileged accounts."], "summary": {"action": "Patch Immediately", "impact": "Authenticated SQL Injection allowing extraction of sensitive database information"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the ays\u2011pro Poll Maker plugin, versions up to and including 6.0.7, which is installed on WordPress sites. Site administrators using any of these affected versions may be targeted by privileged attackers. No other WordPress plugins or core components are listed as affected.", "description_and_impact": "The Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls plugin for WordPress contains a generic SQL Injection vulnerability in the 'filterbyauthor' parameter. Unsanitized input is inserted directly into a query, permitting attackers who possess Administrator\u2011level credentials to inject additional SQL commands. The result is the ability to retrieve sensitive data from the database, potentially exposing site content, user information, or payment details. The flaw requires a user to be authenticated at an administrative level and does not allow unauthenticated exploitation.", "risk_and_exploitability": "The CVSS score of 4.9 indicates a moderate impact, while the EPSS score of below 1% reflects a very low probability that the vulnerability will be exploited in the wild at this time. The flaw is not listed in the CISA KEV catalog, suggesting it is not currently being actively leveraged by organizations. Likely attack scenarios involve an attacker who already has administrator access or has compromised an administrative account through phishing or credential reuse. Once in possession of such access, the attacker can craft HTTP requests containing malicious 'filterbyauthor' values to inject SQL statements and read data from the database."}}}}, "created": "2025-11-13T15:50:13.210327+00:00", "updated": "2026-04-22T00:45:04.150301+00:00", "vendors": ["ays-pro", "ays-pro$PRODUCT$poll_maker", "wordpress", "wordpress$PRODUCT$wordpress"]}