WordPress Poll Maker Plugin Basic Information Exposure Vulnerability

A vulnerability allowing basic information exposure has been identified in the Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress. This issue affects all versions through 5.8.9 and arises from the 'ays_finish_poll' AJAX action. The vulnerability allows unauthenticated attackers to access admin email information, which is inadvertently revealed in the poll response.

Impact

Exploitation of this vulnerability leads to the unauthorized disclosure of admin email addresses.

Remediation

Users can update to version 5.9.0 or a newer patched version to address this vulnerability.