PT-2023-24632 · WordPress · The Poll Maker – Best Wordpress Poll Plugin

Abu Hurayra + 1 · Published 2023-11-13 · Updated 2023-11-17 · CVE-2023-34013

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Poll Maker – Best WordPress Poll Plugin versions 4.6.2 and earlier

Description The issue is a Server-Side Request Forgery (SSRF) vulnerability. This means an attacker can potentially force the server to make unintended requests, leading to various security issues.

Recommendations For versions 4.6.2 and earlier, update to a version later than 4.6.2 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2023-34013

Affected Products

The Poll Maker – Best Wordpress Poll Plugin

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-34013 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34013 · Vendor Advisory
• https://t.me/cvenotify/60637 · Telegram Post
• https://patchstack.com/database/vulnerability/poll-maker/wordpress-poll-maker-plugin-4-6-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve · Note