CVE-2014-4856: Polldaddy Polls & Ratings Plugin Project Polldaddy Polls & Ratings

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ratings shortcode and a unique ID. NOTE: some of these details are obtained from third party information.

Affected products

• Polldaddy Polls & Ratings Plugin Project Polldaddy Polls & Ratings: up to and including 2.0.24

Published 2014-07-10. Last modified 2026-06-17.