6.5
Medium
CVE-2024-6496 The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers…
Description
The Light Poll WordPress plugin through 1.0.0 does not have CSRF checks when deleting polls, which could allow attackers to make logged in users perform such action via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Light Poll 1.0 | earliest → 1.0.0 | No fix stated |
| light_poll 1.0 | earliest → 1.0.0 | No fix stated |