Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-68081 2 Lester Chan, Wordpress 2 Wp-polls, Wordpress 2026-07-23 5.9 Medium
Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions.
CVE-2013-2697 2 Lester Chan, Wordpress 2 Wp-downloadmanager, Wordpress 2025-04-11 N/A
Cross-site request forgery (CSRF) vulnerability in the WP-DownloadManager plugin before 1.61 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.