Headline

CVE-2023-34013: WordPress Poll Maker plugin <= 4.6.2 - Server Side Request Forgery (SSRF) vulnerability - Patchstack

Server-Side Request Forgery (SSRF) vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll Plugin: from n/a through 4.6.2.

1 year ago

CVE

Open in Source

#vulnerability #web #wordpress #ssrf

Solution

Fixed

Update the WordPress Poll Maker plugin to the latest available version (at least 4.6.3).

Found this useful? Thank Abu Hurayra for reporting this vulnerability. Buy a coffee ☕

Abu Hurayra discovered and reported this Server Side Request Forgery (SSRF) vulnerability in WordPress Poll Maker Plugin. This could allow a malicious actor to cause a website to execute website requests to an arbitrary domain of the attacker. This could allow a malicious actor to find sensitive information of other services running on the system. This vulnerability has been fixed in version 4.6.3.

Other vulnerabilities in this plugin

0 present

6 patched

View all

WordPress plugin developer?

Start a free security program for your WordPress plugins or request an audit.

Apply for MVDP

Security researcher?

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more