TotalSuite vulnerabilities

🔔 Create alert RSS

Published CVEs affecting TotalSuite products: 3 record(s), with severity, exploitation and fixes.

Total Poll Lite 2 TotalContest Lite 1

Exploited only (KEV) →

CVE-2026-39651 Medium · 6.5 CWE-862 Apr 8, 2026

WordPress Total Poll Lite plugin <= 4.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through <= 4.12.0.

CVE-2026-27044 Critical · 9.9 CWE-94 Mar 25, 2026

TotalSuite Total Poll Lite Code Injection Vulnerability (CVE-2026-27044)

Improper Control of Generation of Code ('Code Injection') vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through <= 4.12.0.

CVE-2026-0677 Medium · 6.3 CWE-502 Mar 20, 2026

WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injection.This issue affects TotalContest Lite: from n/a through <= 2.9.1.