PT-2020-12762 · Totalsoft · Responsive Poll

Pak0S · Published 2020-04-13 · Updated 2021-07-21 · CVE-2020-11673

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Responsive Poll versions 1.3.4 and earlier

Description An issue allows an unauthenticated user to manipulate polls, including deletion, cloning, or viewing hidden polls. This is due to the usage of the wp ajax nopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operations.

Recommendations For Responsive Poll versions 1.3.4 and earlier, consider disabling the sensitive operations within the wp ajax nopriv function in Includes/Total-Soft-Poll-Ajax.php until a patch is available. Restrict access to the Includes/Total-Soft-Poll-Ajax.php file to minimize the risk of exploitation.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-11673

Affected Products

Responsive Poll

References · 4

• 🔥 https://gist.github.com/pak0s/05a0e517aeff4b1422d1a93f59718459 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11673 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11673 · Vendor Advisory
• https://wordpress.org/plugins/poll-wp/#developers · Note