CVE-2016-10936: Wp-Polls Project Wp-Polls

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option.

Affected products

• Wp-Polls Project Wp-Polls: before 2.73.1 (fixed in 2.73.1)

Published 2019-08-27. Last modified 2026-06-17.