WordPress Poll Maker Plugin Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the WordPress Poll Maker plugin, specifically in versions through 5.5.6. This vulnerability arises from missing authorization checks, allowing unprivileged users to perform actions reserved for higher privileges.

Impact

Exploitation of this vulnerability could enable unauthorized users to access or modify data or perform actions with elevated privileges, potentially leading to further exploitation or compromise of the site.

Remediation

Users of the WordPress Poll Maker plugin should update to version 5.5.7 or later. Patchstack users can enable auto-update for vulnerable plugins.