What’s Vulnerable › Products
Ays Pro Poll Maker vulnerabilities
23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Check whether your Ays Pro Poll Maker version is affected
Latest Ays Pro Poll Maker vulnerabilities
- CVE-2025-12620 — Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter (CVSS 4.9)
- CVE-2025-57954 — WordPress Poll Maker Plugin <= 6.0.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2024-12575 — Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure (CVSS 5.3)
- CVE-2025-47545 — WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability (CVSS 8.1)
- CVE-2025-24577 — WordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerability (CVSS 9.8)
- CVE-2024-13602 — Poll Maker < 5.5.4 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2025-26971 — WordPress Poll Maker <= 5.6.5 - SQL Injection vulnerability (CVSS 9.8)
- CVE-2024-56277 — WordPress Poll Maker Plugin < 5.5.5 - HTML Injection vulnerability (CVSS 5.3)
- CVE-2024-56295 — WordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2023-45766 — WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2023-50904 — WordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2024-12115 — Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication (CVSS 4.3)
- CVE-2024-9874 — WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection (CVSS 7.2)
- CVE-2024-9475 — Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter (CVSS 7.2)
- CVE-2024-9462 — Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings (CVSS 4.8)
- CVE-2024-3601 — Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration (CVSS 5.3)
- CVE-2024-3600 — Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2023-34013 — WordPress Poll Maker Plugin <= 4.6.2 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 7.5)
- CVE-2023-41871 — WordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2022-1456 — Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)
- CVE-2021-24651 — Poll Maker < 3.4.2 - Unauthenticated Time Based SQL Injection (CVSS 7.5)
- CVE-2021-34635 — Poll Maker <= 3.2.8 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-24483 — Poll Maker < 3.2.1 - Authenticated Blind SQL Injections (CVSS 7.2)