TotalSuite Total Poll Lite Remote Code Execution Vulnerability
Vulnerability
A code injection vulnerability allowing remote code execution has been identified in the Total Poll Lite WordPress plugin, specifically in versions through 4.12.0. This vulnerability arises from improper control over code generation, leading to remote code inclusion.
Impact
Exploitation of this vulnerability allows for remote code execution on the affected website, potentially leading to unauthorized access and full control over the site.
Remediation
Users are advised to update the Total Poll Lite plugin to the latest version. If an update cannot be applied, consult with your hosting provider or web developer for assistance.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.