CVE Intelligence

Totalsoft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Totalsoft products: 3 record(s), with severity, exploitation and fixes.

TS Poll 2Portfolio Gallery 1

Exploited only (KEV) →

CVE-2026-25428 Medium · 4.4 CWE-918 Feb 19, 2026
WordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in totalsoft TS Poll poll-wp allows Server Side Request Forgery.This issue affects TS Poll: from n/a through <= 2.5.5.
CVE-2025-62098 Medium · 5.4 CWE-862 Dec 31, 2025
WordPress Portfolio Gallery plugin <= 1.4.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in totalsoft Portfolio Gallery gallery-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Portfolio Gallery: from n/a through <= 1.4.8.
CVE-2025-68588 Medium · 4.3 CWE-862 Dec 24, 2025
WordPress TS Poll plugin <= 2.5.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in totalsoft TS Poll poll-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TS Poll: from n/a through <= 2.5.5.