PT-2026-20745 · Totalsoft · Ts Poll

Jakub Herman · Publicado 2026-02-19 · Atualizado 2026-02-19 · CVE-2026-25428

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions totalsoft TS Poll versions through 2.5.5

Description The software contains a Server-Side Request Forgery (SSRF) flaw. This allows for Server Side Request Forgery. The vulnerability exists due to insufficient input validation, potentially allowing an attacker to make requests on behalf of the server.

Recommendations Update totalsoft TS Poll to a version later than 2.5.5.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-25428

Produtos afetados

Ts Poll

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25428 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Plugin/poll-wp/vulnerability/wordpress-ts-poll-plugin-2-5-5-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/2024411341356667093 · Publicação no Twitter