CVE Intelligence

Dwbooster CP Polls vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dwbooster CP Polls: 2 record(s), with affected versions and fixes.

CVE-2016-20067 Medium · 4.3 CWE-352 Jun 15, 2026
WordPress CP Polls 1.0.8 Cross-Site Request Forgery
WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in.
CVE-2016-20066 High · 7.2 CWE-79 Jun 15, 2026
WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting
WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. Attackers can upload files containing script payloads with event handlers like onerror attributes to execute arbitrary JavaScript in the browsers of users viewing the affected content.