← WordPress Vulnerabilities
WordPress security by component

Total Poll Lite

Total Poll Lite is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published Apr 08, 2026; the highest CVE/CNA score is 9.9.

Plugin slug: totalpoll-lite

CVE-2026-39651: Total Poll Lite: A security weakness

Total Poll Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 4.12.0.

PublishedApr 08, 2026
Known safe version> 4.12.0
Safe version
Apr 08, 2026 CVE-2026-39651
Total Poll Lite: A security weakness
Total Poll Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 4.12.0.
> 4.12.0
CVE6.5
NVDPending
Mar 25, 2026 CVE-2026-27044
Total Poll Lite: Code execution
Total Poll Lite is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is <= 4.12.0.
> 4.12.0
CVE9.9
NVDPending
Dec 09, 2024 CVE-2023-27449
Total Poll Lite: A security weakness
Total Poll Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.3
NVDPending
Jun 09, 2024 CVE-2024-32821
Total Poll Lite: A security weakness
Total Poll Lite is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending