CVE-2024-12575
BaseFortify
Publication date: 2025-08-16
Last updated on: 2025-08-18
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wordpress | poll_maker | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-200 | The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress up to version 5.8.9. It allows unauthenticated attackers to exploit the 'ays_finish_poll' AJAX action to retrieve admin email information that is exposed in the poll response, leading to basic information exposure.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing unauthenticated attackers to obtain the administrator's email address from the poll responses. This exposure of admin email information could lead to targeted phishing attacks or other social engineering attempts.