T
he Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_poll_create_author function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email addresses by enumerating them one character at a time.
References
Configurations
History
28 May 2025, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ays-pro
Ays-pro poll Maker |
|
| CWE | CWE-862 | |
| CPE | cpe:2.3:a:ays-pro:poll_maker:*:*:*:*:free:wordpress:*:* | |
| References | () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3071296%40poll-maker&new=3071296%40poll-maker&sfp_email=&sfph_mail= - Product | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/fc0505a1-c7c4-4cf1-97cd-123a4dddcea3?source=cve - Third Party Advisory |
21 Nov 2024, 09:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3071296%40poll-maker&new=3071296%40poll-maker&sfp_email=&sfph_mail= - | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/fc0505a1-c7c4-4cf1-97cd-123a4dddcea3?source=cve - |
02 May 2024, 18:00
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-02 17:15
Updated : 2025-05-28 18:43
NVD link : CVE-2024-3601
Mitre link : CVE-2024-3601
CVE.ORG link : CVE-2024-3601
JSON object : View
Products Affected
CWE
CWE-862
Missing Authorization