CVE-2024-6496

Light Poll <= 1.0.0 - Polls Deletion via CSRF

The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers to make logged in users perform such action via a CSRF attack

Affected

Light Poll

CVSS v3.1 CNA

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.27% chance of exploitation in the next 30 days, 18th percentile

Published

2024-08-01

Updated

2024-08-07

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/d598eabd-a87a-4e3e-be46-a5c5cc3f130e/

Security advisories

• https://wpscan.com/vulnerability/d598eabd-a87a-4e3e-be46-a5c5cc3f130e

References

• CVE Record
• NVD entry