Medium severity5.3NVD Advisory· Published May 2, 2024· Updated Apr 8, 2026
CVE-2024-3601
CVE-2024-3601
Description
The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_poll_create_author function in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to extract email addresses by enumerating them one character at a time.
Affected products
2Patches
Vulnerability mechanics
References
2- www.wordfence.com/threat-intel/vulnerabilities/id/fc0505a1-c7c4-4cf1-97cd-123a4dddcea3nvdThird Party Advisory
- plugins.trac.wordpress.org/changesetnvdProduct
News mentions
0No linked articles in our index yet.