CVE-2024-12115

Summary

CVE-2024-12115 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Poll Maker plugin for WordPress. Versions up to and including 5.5.4 are susceptible to this issue. The vulnerability stems from insufficient nonce validation on the duplicate_poll() function. As a consequence, unauthenticated attackers can manipulate polls by forging requests. To exploit this vulnerability, an attacker must persuade a site administrator to execute a malicious link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.