Security Advisory

CVE-2020-11673

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-13 15:01:12

Last updated 2024-08-04 11:35:13

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wp_ajax_nopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operations.

← Browse all CVEs View on cve.org ↗