Vulnerabilidades do Dwbooster CP Polls
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Dwbooster CP Polls: 2 registro(s), com versões afetadas e correções.
CVE-2016-20067
Média · 4.3
CWE-352 15/06/2026
WordPress CP Polls 1.0.8 Cross-Site Request Forgery
WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in.
CVE-2016-20066
Alta · 7.2
CWE-79 15/06/2026
WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting
WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. Attackers can upload files containing script payloads with event handlers like onerror attributes to execute arbitrary JavaScript in the browsers of users viewing the affected content.