WordPress Poll Maker Improper Output Encoding Vulnerability Allowing Content Injection

A vulnerability exists in the WordPress Poll Maker plugin, specifically in versions prior to 5.5.5, due to improper encoding or escaping of output. This flaw allows for content injection, where a malicious actor could insert their own content into the pages and posts of a WordPress site. Such an injection could be exploited to add phishing pages, for example.

Impact

Exploitation of this vulnerability could lead to unauthorized content being injected into a WordPress site's pages or posts, with the potential to create phishing pages on the site.

Remediation

Users of the WordPress Poll Maker plugin should update to version 5.5.5 or later to address this vulnerability.