CVE-2024-12115

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.4. This is due to missing or incorrect nonce validation on the duplicate_poll() function. This makes it possible for unauthenticated attackers to duplicate polls via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352

• https://plugins.trac.wordpress.org/changeset/3202972/poll-maker/tags/5.5.5/includes/lists/class-poll-maker-polls-list-table.php?old=3202972&old_path=poll-maker%2Ftags%2F5.5.4%2Fincludes%2Flists%2Fclass-poll-maker-polls-list-table.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/e76447ec-2815-4758-ae2c-67a938a739d9?source=cveThird Party Advisory

Published

Dec 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1211An issue has been discovered in GitLab CE/EE affecting all v…8.8
• CVE-2024-12110The Gold Addons for Elementor plugin for WordPress is vulner…4.3
• CVE-2024-12111In a specific scenario a LDAP user can abuse the authenticat…8
• CVE-2024-12112The Easy Form Builder – WordPress plugin form builder: conta…6.4
• CVE-2024-12113The Youzify – BuddyPress Community, User Profile, Social Net…4.3
• CVE-2024-12114The FooGallery – Responsive Photo Gallery, Image Viewer, Jus…4.3
• CVE-2024-12116The Unlimited Theme Addon For Elementor and WooCommerce plug…4.3
• CVE-2024-12117The Stackable – Page Builder Gutenberg Blocks plugin for Wor…5.4
• CVE-2024-12118The The Events Calendar plugin for WordPress is vulnerable t…5.4
• CVE-2024-12119The FooGallery – Responsive Photo Gallery, Image Viewer, Jus…5.4
• CVE-2024-1212Unauthenticated remote attackers can access the system throu…9.8
• CVE-2024-12120The Royal Elementor Addons and Templates plugin for WordPres…5.4