plugin

Pegapoll Vulnerabilities

1 known security issue reported for the Pegapoll WordPress plugin. Most recent disclosed Oct 25, 2024.

1 critical

Running Pegapoll on your site? Check whether your installed version is affected.

PegaPoll <= 1.0.2 - Unauthenticated Arbitrary Options Update

critical

The PegaPoll plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be le...

CVSS:: 9.8
Affected:: up to 1.0.2
Fix:: No patched version reported
Disclosed:: Oct 25, 2024

CVE-2024-50490 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database