Approved changes feed: RSS · Atom

cpe:2.3:a:dwbooster:cp_polls:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDwbooster (68f45f7b-4028-5f7d-8f51-d831b376be86)
ProductCp Polls (86c8534b-5c69-5dd3-8e9a-92ec280bbe04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-20067 vulnerable 2026-07-28 18:32:21.511331 WordPress CP Polls 1.0.8 Cross-Site Request Forgery
MEDIUM (4.3)
WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in.
Published: 2026-06-15T12:00:38.234Z
Updated: 2026-06-15T21:59:06.922Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-20066 vulnerable 2026-07-28 18:32:21.511076 WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting
HIGH (7.2)
WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file upload functionality. Attackers can upload files containing script payloads with event handlers like onerror attributes to execute arbitrary JavaScript in the browsers of users viewing the affected content.
Published: 2026-06-15T12:00:37.572Z
Updated: 2026-06-15T15:12:17.290Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.