CVE-2025-47545mediumCWE-362

CVE-2025-47545: falha de média gravidade em Ays Pro Poll Maker

WordPress Poll Maker plugin <= 5.7.7 - Race Condition Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Poll Maker

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.4%
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker poll-maker allows Leveraging Race Conditions.This issue affects Poll Maker: from n/a through <= 5.7.7.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Ays Pro · Poll Maker
CVEs relacionadas — Ays Pro Poll Maker

No mesmo produto, das mais perigosas para as menos.

CVE-2021-24483—Poll Maker < 3.2.1 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2023-50904MEDIUMWordPress Poll Maker plugin <= 4.8.0 - Broken Access Control vulnerabilityEPSS 0.7%CVE-2025-26971HIGHWordPress Poll Maker <= 5.6.5 - SQL Injection vulnerabilityEPSS 0.5%CVE-2024-56295MEDIUMWordPress Poll Maker plugin <= 5.5.6 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2025-24577MEDIUMWordPress Poll Maker plugin <= 5.5.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-45766MEDIUMWordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerabilityEPSS 0.4%