We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2016-20067

CVE-2016-20067

WordPress

Severity: MEDIUM
CVSS: 4.3CVSS
Published: 2026-06-15
Last modified: 2026-06-15
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CWE: CWE-352

Description

WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in.

References

https://www.exploit-db.com/exploits/39513
https://www.vulncheck.com/advisories/wordpress-cp-polls-cross-site-request-forgery

Summary

Description

References