What is GHSA-g6fm-r287-xjqj?

GHSA-g6fm-r287-xjqj is a security advisory published by GitHub Security Advisories with Medium severity. WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows...

Which CVE IDs does GHSA-g6fm-r287-xjqj cover?

GHSA-g6fm-r287-xjqj covers the following CVE IDs: CVE-2016-20067. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g6fm-r287-xjqj?

GHSA-g6fm-r287-xjqj has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-g6fm-r287-xjqjMediumCVSS 4.3

WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows...

Vendor

GitHub Security Advisories

Published

June 15, 2026

Last Modified

June 15, 2026

🔗 CVE IDs covered (1)

CVE-2016-20067 →

📋 Description

WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administrators visit the page while logged in.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2016-20067
https://www.exploit-db.com/exploits/39513
https://www.vulncheck.com/advisories/wordpress-cp-polls-cross-site-request-forgery
https://github.com/advisories/GHSA-g6fm-r287-xjqj