Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls

Information

Software Type Plugin
Software Slug poll-maker (view on wordpress.org)
Software Status Active
Software Author ays-pro
Software Website ays-pro.com
Software Downloads 759,747
Software Active Installs 7,000
Software Record Last Updated July 22, 2026

Showing 1-20 of 24 Vulnerabilities

Submit a Vulnerability
Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action
4.3
CVE-2026-8995
May 28, 2026
Researcher: Satoo Nakano
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter
4.9
CVE-2025-12620
Nov 12, 2025
Researcher: type5afe
Poll Maker <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-57954
Sep 22, 2025
Researcher: Abu Hurayra (HurayraIIT)
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure
5.3
CVE-2024-12575
Aug 15, 2025
Researcher: xiaoAGiao
Poll Maker <= 5.7.7 - Unauthenticated Race Condition to Multi-Vote
5.3
CVE-2025-47545
May 7, 2025
Researcher: Ibrahim Mohammad
Poll Maker <= 5.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-13602
Feb 23, 2025
Researcher: Krugov Artyom
Poll Maker <= 5.6.5 - Authenticated (Administrator+) SQL Injection
4.9
CVE-2025-26971
Feb 23, 2025
Researcher: Webula
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.5.4 - Unauthenticated HTML Injection
5.3
CVE-2024-56277
Jan 3, 2025
Researcher: Muhammad Zidan Ali Mansur
Poll Maker <= 5.5.6 - Missing Authorization
6.5
CVE-2024-56295
Jan 3, 2025
Researcher: Nosa "apapedulimu" Shandy
Poll Maker <= 5.5.0 - Missing Authorization
6.5
CVE-2025-24577
Dec 15, 2024
Researcher: Trương Hữu Phúc (truonghuuphuc)
Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication
4.3
CVE-2024-12115
Dec 6, 2024
Researcher: Noah Stead (TurtleBurg)
WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection
4.9
CVE-2024-9874
Nov 8, 2024
Researcher: tmrswrr
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings
5.5
CVE-2024-9462
Oct 25, 2024
Researcher: Jonas Benjamin Friedli
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter
4.9
CVE-2024-9475
Oct 25, 2024
Researcher: Ivan Kuzymchak
Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration
5.3
CVE-2024-3601
Apr 18, 2024
Researcher: Krzysztof Zając
Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2024-3600
Apr 18, 2024
Researcher: Krzysztof Zając
Poll Maker <= 4.8.0 - Missing Authorization
5.3
CVE-2023-50904
Dec 26, 2023
Researcher: Abdi Pranata
Poll Maker <= 4.7.1 - Missing Authorization
5.3
CVE-2023-45766
Oct 12, 2023
Researcher: Revan Arifio
Poll Maker <= 4.7.0 - Reflected Cross-Site Scripting
6.1
CVE-2023-41871
Sep 5, 2023
Researcher: Le Ngoc Anh
Poll Maker <= 4.6.2 - Authenticated (Admin+) Server-Side Request Forgery
4.7
CVE-2023-34013
Jun 26, 2023
Researcher: Abu Hurayra (HurayraIIT)
Title Status CVE ID CVSS Researchers Date
Poll Maker by AYS <= 6.3.7 - Authenticated (Subscriber+) Sensitive Information Exposure in 'ays_poll_get_user_information' AJAX Action Patched CVE-2026-8995 4.3 Satoo Nakano May 28, 2026
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 6.0.7 - Authenticated (Administrator+) SQL Injection via `filterbyauthor` Parameter Patched CVE-2025-12620 4.9 type5afe November 12, 2025
Poll Maker <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-57954 6.4 Abu Hurayra (HurayraIIT) September 22, 2025
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.8.9 - Unauthenticated Basic Information Exposure Patched CVE-2024-12575 5.3 xiaoAGiao August 15, 2025
Poll Maker <= 5.7.7 - Unauthenticated Race Condition to Multi-Vote Patched CVE-2025-47545 5.3 Ibrahim Mohammad May 7, 2025
Poll Maker <= 5.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2024-13602 4.4 Krugov Artyom February 23, 2025
Poll Maker <= 5.6.5 - Authenticated (Administrator+) SQL Injection Patched CVE-2025-26971 4.9 Webula February 23, 2025
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.5.4 - Unauthenticated HTML Injection Patched CVE-2024-56277 5.3 Muhammad Zidan Ali Mansur January 3, 2025
Poll Maker <= 5.5.6 - Missing Authorization Patched CVE-2024-56295 6.5 Nosa "apapedulimu" Shandy January 3, 2025
Poll Maker <= 5.5.0 - Missing Authorization Patched CVE-2025-24577 6.5 Trương Hữu Phúc (truonghuuphuc) December 15, 2024
Poll Maker <= 5.5.4 - Cross-Site Request Forgery to Poll Duplication Patched CVE-2024-12115 4.3 Noah Stead (TurtleBurg) December 6, 2024
WordPress Poll Maker Plugin <= 5.4.6 - Authenticated (Administrator+) Time-Based SQL Injection Patched CVE-2024-9874 4.9 tmrswrr November 8, 2024
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Poll Settings Patched CVE-2024-9462 5.5 Jonas Benjamin Friedli October 25, 2024
Poll Maker – Versus Polls, Anonymous Polls, Image Polls <= 5.4.6 - Authenticated (Administrator+) SQL Injection via Order_by Parameter Patched CVE-2024-9475 4.9 Ivan Kuzymchak October 25, 2024
Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Email Enumeration Patched CVE-2024-3601 5.3 Krzysztof Zając April 18, 2024
Poll Maker – Best WordPress Poll Plugin <= 5.1.8 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting Patched CVE-2024-3600 7.2 Krzysztof Zając April 18, 2024
Poll Maker <= 4.8.0 - Missing Authorization Patched CVE-2023-50904 5.3 Abdi Pranata December 26, 2023
Poll Maker <= 4.7.1 - Missing Authorization Patched CVE-2023-45766 5.3 Revan Arifio October 12, 2023
Poll Maker <= 4.7.0 - Reflected Cross-Site Scripting Patched CVE-2023-41871 6.1 Le Ngoc Anh September 5, 2023
Poll Maker <= 4.6.2 - Authenticated (Admin+) Server-Side Request Forgery Patched CVE-2023-34013 4.7 Abu Hurayra (HurayraIIT) June 26, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation